0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)='-&a\x00'}, 0x30) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x51, 0x2, 0x9, {0x90, 0x5}, {0x4, 0x5}, @ramp={0x4, 0x497f, {0x7f, 0x9, 0x7ff, 0x4d86}}}) 17:10:12 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{0x0, 0x1}, 0x1, 0x6, 0x0, 0x0, "c1daaeadfe80e962"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4048080) (async) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{}, {}], &(0x7f0000000180)=0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000000)={0x476f, 0x2}) 17:10:12 executing program 4: io_setup(0xb6, &(0x7f0000000080)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x81, &(0x7f00000000c0)) io_submit(r0, 0x1, &(0x7f0000001880)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="af9e5a5879c1681d44e04b12b49a3ca1fe0a8d2631649c0d84bcb324b52688e938c5ee07f625ac065e8a50339408628db55e17eba5f759a445a017d5437ab518e15edc673cb15f", 0x47}]) socket$isdn_base(0x22, 0x3, 0x0) 17:10:12 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000100)={0x80, 0x3ff, 0x4, 0x7f, 0x200, 0x7fff}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async, rerun: 32) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000200)=0x7) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000180)=""/93) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000140)={{0x4, 0x10001}, {0x20, 0x1223}, 0xe97}) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2711, @hyper}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0), 0x10) 17:10:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x28}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x40841) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x2, 0xa, 0x401, 0x0, 0xffffffff, {0x1}}, 0x14}}, 0x24800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8a}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x4) read$rfkill(0xffffffffffffffff, &(0x7f00000002c0), 0x8) 17:10:12 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xf, 0x6, 0x8, 0x23, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_lifetime={0x4, 0x4, 0x1, 0x7fffffffffffffff, 0xffffffffffffffff, 0x1ff}, @sadb_key={0x1d, 0x8, 0x6e0, 0x0, "a8c2043846b173a7bde29c124fc1c48b48154b353b796209fd2d58b5878f0a916f4bc680f2207736842b060f7c6e558a8e1c6e0ff59cf9f4076f5566b34731e07256bbfe3772823d0319671ebfb926d9237fd9b52459a62fa77465551be94b6760e65bd8078b6a5881f598a6e6effbe80962c75864dba23da80a7b5132741df9842a3fe9099999d3a45a81792f3a8d8a48d79d8cf8a8651fb228d3ee5a69a741162a95dd5c98862a2814b954e360f4d8c59cd871a61c5849ba924d6c8d7794d738720de1987275a94c9442b48a6ff1c27da05fa3dbf7cd1fb340a1e6"}]}, 0x118}}, 0x40014) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0x21) 17:10:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040) 17:10:12 executing program 3: io_setup(0xb6, &(0x7f0000000080)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x81, &(0x7f00000000c0)) io_submit(r0, 0x1, &(0x7f0000001880)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="af9e5a5879c1681d44e04b12b49a3ca1fe0a8d2631649c0d84bcb324b52688e938c5ee07f625ac065e8a50339408628db55e17eba5f759a445a017d5437ab518e15edc673cb15f", 0x47}]) socket$isdn_base(0x22, 0x3, 0x0) 17:10:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x28}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x40841) (async, rerun: 32) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x2, 0xa, 0x401, 0x0, 0xffffffff, {0x1}}, 0x14}}, 0x24800) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8a}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x4) read$rfkill(0xffffffffffffffff, &(0x7f00000002c0), 0x8) 17:10:12 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x3, 0xffffffffffffffff, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000100)={0x80, 0x3ff, 0x4, 0x7f, 0x200, 0x7fff}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async, rerun: 64) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000200)=0x7) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000180)=""/93) (async, rerun: 64) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000140)={{0x4, 0x10001}, {0x20, 0x1223}, 0xe97}) (rerun: 64) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2711, @hyper}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0), 0x10) 17:10:12 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xf, 0x6, 0x8, 0x23, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_lifetime={0x4, 0x4, 0x1, 0x7fffffffffffffff, 0xffffffffffffffff, 0x1ff}, @sadb_key={0x1d, 0x8, 0x6e0, 0x0, "a8c2043846b173a7bde29c124fc1c48b48154b353b796209fd2d58b5878f0a916f4bc680f2207736842b060f7c6e558a8e1c6e0ff59cf9f4076f5566b34731e07256bbfe3772823d0319671ebfb926d9237fd9b52459a62fa77465551be94b6760e65bd8078b6a5881f598a6e6effbe80962c75864dba23da80a7b5132741df9842a3fe9099999d3a45a81792f3a8d8a48d79d8cf8a8651fb228d3ee5a69a741162a95dd5c98862a2814b954e360f4d8c59cd871a61c5849ba924d6c8d7794d738720de1987275a94c9442b48a6ff1c27da05fa3dbf7cd1fb340a1e6"}]}, 0x118}}, 0x40014) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0x21) 17:10:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000000008010100000000000000000500000205000300010000000900010073797a300000000006000240888400000900010073797a31000000000a4b6bd6309ed50f11a97764b0d6f722b490808f3dcd4331d31037c93dc19a6fa32a5fa9c556fffcaecc6602e8beae918b1828b4e1b4ee957025ee068ba8bbdc40d1545e666cc176b45c0e7e4cfb5792a438e9ffaf3a41c4c5a36719bd911851c9d0c0312646c270db5df119486ad05e5bbe0c9da2a221a903b1ae3f0ce1a049e6e001cce767f178a6fbc3f0efcd7e797854aaa8b7e1fb7fb5c848ee8938a634c93e1087b33ba18ad697f18bc2d5ff103e3a13bfad3d9b1c06f40183580c4901adf832317eb4fef81b4686a33608a7c587ed7131a75cac296dbe236c31f340d1d3c6ff75d729c0a18ece26580aa7228b567d1c"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040) 17:10:12 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x1001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0xa15, 0xcb7d, 0x40, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x7}, 0x48) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000080)={{0x4, 0x93d}, {0x10000, 0x7}, 0x40, 0x1}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x210000, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f00000004c0)={0x4, 0x85d, 0x8, 0x8, 0x5, 0x7064}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340), 0x280, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x9, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x646fc936}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xa95}, @jmp={0x5, 0x1, 0x0, 0x9, 0xb, 0xfffffffffffffffe, 0xfffffffffffffff0}], &(0x7f0000000180)='GPL\x00', 0xf8, 0x49, &(0x7f0000000200)=""/73, 0x41100, 0x12, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000380)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xa, 0x3, 0xf1b}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r0]}, 0x80) 17:10:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x28}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x40841) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x2, 0xa, 0x401, 0x0, 0xffffffff, {0x1}}, 0x14}}, 0x24800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8a}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x4) (async) read$rfkill(0xffffffffffffffff, &(0x7f00000002c0), 0x8) 17:10:13 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xf, 0x6, 0x8, 0x23, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_lifetime={0x4, 0x4, 0x1, 0x7fffffffffffffff, 0xffffffffffffffff, 0x1ff}, @sadb_key={0x1d, 0x8, 0x6e0, 0x0, "a8c2043846b173a7bde29c124fc1c48b48154b353b796209fd2d58b5878f0a916f4bc680f2207736842b060f7c6e558a8e1c6e0ff59cf9f4076f5566b34731e07256bbfe3772823d0319671ebfb926d9237fd9b52459a62fa77465551be94b6760e65bd8078b6a5881f598a6e6effbe80962c75864dba23da80a7b5132741df9842a3fe9099999d3a45a81792f3a8d8a48d79d8cf8a8651fb228d3ee5a69a741162a95dd5c98862a2814b954e360f4d8c59cd871a61c5849ba924d6c8d7794d738720de1987275a94c9442b48a6ff1c27da05fa3dbf7cd1fb340a1e6"}]}, 0x118}}, 0x40014) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0x21) 17:10:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040) 17:10:13 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x0, 0x401, 0x0, 0x3}, r0, 0x3, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0)=[{{0x1, 0x1, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x3}}, {{0x1, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}, {{0x0, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x1, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1}, {0x4}}], 0x40) ioprio_get$pid(0x2, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) syz_open_dev$evdev(&(0x7f0000000200), 0x8, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 17:10:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x800) socket(0x2, 0x3, 0x2c) 17:10:13 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x1001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0xa15, 0xcb7d, 0x40, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x7}, 0x48) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000080)={{0x4, 0x93d}, {0x10000, 0x7}, 0x40, 0x1}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x210000, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f00000004c0)={0x4, 0x85d, 0x8, 0x8, 0x5, 0x7064}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340), 0x280, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x9, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x646fc936}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xa95}, @jmp={0x5, 0x1, 0x0, 0x9, 0xb, 0xfffffffffffffffe, 0xfffffffffffffff0}], &(0x7f0000000180)='GPL\x00', 0xf8, 0x49, &(0x7f0000000200)=""/73, 0x41100, 0x12, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000380)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xa, 0x3, 0xf1b}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r0]}, 0x80) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x1001, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0xa15, 0xcb7d, 0x40, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x7}, 0x48) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000080)={{0x4, 0x93d}, {0x10000, 0x7}, 0x40, 0x1}) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x210000, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) (async) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f00000004c0)={0x4, 0x85d, 0x8, 0x8, 0x5, 0x7064}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340), 0x280, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x9, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x646fc936}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xa95}, @jmp={0x5, 0x1, 0x0, 0x9, 0xb, 0xfffffffffffffffe, 0xfffffffffffffff0}], &(0x7f0000000180)='GPL\x00', 0xf8, 0x49, &(0x7f0000000200)=""/73, 0x41100, 0x12, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000380)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xa, 0x3, 0xf1b}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r0]}, 0x80) (async) 17:10:13 executing program 3: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x0, 0x401, 0x0, 0x3}, r0, 0x3, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0)=[{{0x1, 0x1, 0x1}, {0x4, 0x1, 0x1}}, {{}, {0x3}}, {{0x1, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}, {{0x0, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x1, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1}, {0x4}}], 0x40) ioprio_get$pid(0x2, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) syz_open_dev$evdev(&(0x7f0000000200), 0x8, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 17:10:13 executing program 5: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000100)=0x5, 0x8) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000080)={0x8, 0x37, "b901c2d2e3b11374b7d8343758a2ece07b96cbb5f9f5b5fa21052664bb4d6e17d24216a5664ac3eb34190d26b1849c32784b521b2be0d6"}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:13 executing program 1: semctl$IPC_INFO(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000000)=""/68) socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040), 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000000)) 17:10:13 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x1001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0xa15, 0xcb7d, 0x40, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x7}, 0x48) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000080)={{0x4, 0x93d}, {0x10000, 0x7}, 0x40, 0x1}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x210000, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f00000004c0)={0x4, 0x85d, 0x8, 0x8, 0x5, 0x7064}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340), 0x280, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x9, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x646fc936}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xa95}, @jmp={0x5, 0x1, 0x0, 0x9, 0xb, 0xfffffffffffffffe, 0xfffffffffffffff0}], &(0x7f0000000180)='GPL\x00', 0xf8, 0x49, &(0x7f0000000200)=""/73, 0x41100, 0x12, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000380)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xa, 0x3, 0xf1b}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r0]}, 0x80) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x1001, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0xa15, 0xcb7d, 0x40, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x7}, 0x48) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000080)={{0x4, 0x93d}, {0x10000, 0x7}, 0x40, 0x1}) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x210000, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) (async) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f00000004c0)={0x4, 0x85d, 0x8, 0x8, 0x5, 0x7064}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340), 0x280, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x9, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x646fc936}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xa95}, @jmp={0x5, 0x1, 0x0, 0x9, 0xb, 0xfffffffffffffffe, 0xfffffffffffffff0}], &(0x7f0000000180)='GPL\x00', 0xf8, 0x49, &(0x7f0000000200)=""/73, 0x41100, 0x12, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000380)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xa, 0x3, 0xf1b}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r0]}, 0x80) (async) 17:10:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (async) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x800) (async) socket(0x2, 0x3, 0x2c) 17:10:13 executing program 5: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000100)=0x5, 0x8) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000080)={0x8, 0x37, "b901c2d2e3b11374b7d8343758a2ece07b96cbb5f9f5b5fa21052664bb4d6e17d24216a5664ac3eb34190d26b1849c32784b521b2be0d6"}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000100)=0x5, 0x8) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000080)={0x8, 0x37, "b901c2d2e3b11374b7d8343758a2ece07b96cbb5f9f5b5fa21052664bb4d6e17d24216a5664ac3eb34190d26b1849c32784b521b2be0d6"}) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) 17:10:13 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 1) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:13 executing program 1: semctl$IPC_INFO(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000000)=""/68) socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040), 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000000)) 17:10:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x800) (async) socket(0x2, 0x3, 0x2c) 17:10:13 executing program 5: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000100)=0x5, 0x8) (async) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000080)={0x8, 0x37, "b901c2d2e3b11374b7d8343758a2ece07b96cbb5f9f5b5fa21052664bb4d6e17d24216a5664ac3eb34190d26b1849c32784b521b2be0d6"}) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x174, 0x0, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_EXPECT_NAT={0x13c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x27}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xbe}}]}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1000}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}]}, 0x174}, 0x1, 0x0, 0x0, 0x4004041}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0xb, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:13 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) (fail_nth: 1) 17:10:13 executing program 1: semctl$IPC_INFO(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000000)=""/68) (async, rerun: 32) socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 32) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040), 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000000)) 17:10:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x174, 0x0, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_EXPECT_NAT={0x13c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x27}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xbe}}]}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1000}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}]}, 0x174}, 0x1, 0x0, 0x0, 0x4004041}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0xb, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x174, 0x0, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_EXPECT_NAT={0x13c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x27}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xbe}}]}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1000}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}]}, 0x174}, 0x1, 0x0, 0x0, 0x4004041}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)) (async) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0xb, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040000) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) [ 2398.041368] FAULT_INJECTION: forcing a failure. [ 2398.041368] name failslab, interval 1, probability 0, space 0, times 0 [ 2398.071497] CPU: 1 PID: 4341 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 2398.077445] FAULT_INJECTION: forcing a failure. [ 2398.077445] name failslab, interval 1, probability 0, space 0, times 0 [ 2398.079336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2398.079341] Call Trace: [ 2398.079358] dump_stack+0x1b2/0x281 [ 2398.079372] should_fail.cold+0x10a/0x149 [ 2398.079388] should_failslab+0xd6/0x130 [ 2398.114222] kmem_cache_alloc+0x28e/0x3c0 [ 2398.118370] ? sock_destroy_inode+0x60/0x60 [ 2398.122687] sock_alloc_inode+0x19/0x250 [ 2398.126754] ? sock_destroy_inode+0x60/0x60 [ 2398.131101] alloc_inode+0x5d/0x170 [ 2398.134726] new_inode_pseudo+0x14/0xe0 17:10:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c010) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000040)={{0x200000000, 0x1}, {0x7, 0x1}, 0xe3d0}) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 17:10:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c010) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000040)={{0x200000000, 0x1}, {0x7, 0x1}, 0xe3d0}) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) [ 2398.138696] sock_alloc+0x3c/0x270 [ 2398.142228] __sock_create+0x8a/0x620 [ 2398.146030] SyS_socket+0xd1/0x1b0 [ 2398.149609] ? move_addr_to_kernel+0x60/0x60 [ 2398.154007] ? __do_page_fault+0x159/0xad0 [ 2398.158239] ? do_syscall_64+0x4c/0x640 [ 2398.162208] ? move_addr_to_kernel+0x60/0x60 [ 2398.166621] do_syscall_64+0x1d5/0x640 [ 2398.170601] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2398.175779] RIP: 0033:0x7f436bbd8109 [ 2398.179475] RSP: 002b:00007f436a54d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 17:10:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) (async) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c010) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000040)={{0x200000000, 0x1}, {0x7, 0x1}, 0xe3d0}) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 17:10:13 executing program 5: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2db}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7461ca6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x944}, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000001c0), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000200), 0x4) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r3) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7, 0x8000, 0x1, 0x2, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x67, 0x0, 0xfb, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @remote, {[@ssrr={0x89, 0xf, 0x95, [@rand_addr=0x64010102, @empty, @empty]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000), 0xc, &(0x7f0000000480)={&(0x7f0000000180)={0x2c8, 0x0, 0x200, 0x70bd25, 0x8, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8958}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x15c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}}]}}]}, 0x2c8}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) [ 2398.187174] RAX: ffffffffffffffda RBX: 00007f436bceaf60 RCX: 00007f436bbd8109 [ 2398.194447] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000022 [ 2398.201723] RBP: 00007f436a54d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2398.209002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2398.216267] R13: 00007ffec0f54d3f R14: 00007f436a54d300 R15: 0000000000022000 [ 2398.241050] CPU: 0 PID: 4346 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2398.248960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2398.250381] socket: no more sockets [ 2398.258309] Call Trace: [ 2398.258327] dump_stack+0x1b2/0x281 [ 2398.258342] should_fail.cold+0x10a/0x149 [ 2398.258354] should_failslab+0xd6/0x130 [ 2398.258366] kmem_cache_alloc_trace+0x29a/0x3d0 [ 2398.258377] loop_add+0x83/0x830 [ 2398.258387] ? loop_queue_rq+0x280/0x280 [ 2398.268202] ? trace_hardirqs_on+0x10/0x10 [ 2398.292579] loop_control_ioctl+0x161/0x3f0 [ 2398.296915] ? loop_lookup+0x190/0x190 [ 2398.300810] ? SyS_write+0x1b7/0x210 [ 2398.304537] ? loop_lookup+0x190/0x190 [ 2398.308425] do_vfs_ioctl+0x75a/0xff0 [ 2398.312231] ? lock_acquire+0x170/0x3f0 [ 2398.316216] ? ioctl_preallocate+0x1a0/0x1a0 [ 2398.320634] ? __fget+0x265/0x3e0 [ 2398.324083] ? do_vfs_ioctl+0xff0/0xff0 [ 2398.328063] ? security_file_ioctl+0x83/0xb0 [ 2398.332451] SyS_ioctl+0x7f/0xb0 [ 2398.335795] ? do_vfs_ioctl+0xff0/0xff0 [ 2398.339751] do_syscall_64+0x1d5/0x640 [ 2398.343625] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2398.348789] RIP: 0033:0x7ffa0bda9109 [ 2398.352558] RSP: 002b:00007ffa0a6fd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2398.360250] RAX: ffffffffffffffda RBX: 00007ffa0bebc030 RCX: 00007ffa0bda9109 [ 2398.367499] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2398.374747] RBP: 00007ffa0a6fd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2398.381999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 17:10:13 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 2) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x174, 0x0, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_EXPECT_NAT={0x13c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x27}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xbe}}]}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1000}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}]}, 0x174}, 0x1, 0x0, 0x0, 0x4004041}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0xb, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040000) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:13 executing program 5: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2db}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7461ca6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x944}, 0x4) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000001c0), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000200), 0x4) (async, rerun: 32) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r3) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (rerun: 64) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7, 0x8000, 0x1, 0x2, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x67, 0x0, 0xfb, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @remote, {[@ssrr={0x89, 0xf, 0x95, [@rand_addr=0x64010102, @empty, @empty]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000), 0xc, &(0x7f0000000480)={&(0x7f0000000180)={0x2c8, 0x0, 0x200, 0x70bd25, 0x8, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8958}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x15c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}}]}}]}, 0x2c8}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) 17:10:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x54, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044051}, 0x40000) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x4, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20008000) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000014) 17:10:13 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) (fail_nth: 2) 17:10:13 executing program 1: r0 = socket(0x28, 0xa, 0x81) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0x7f}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6c2f0371}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_bond\x00'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7f}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7356}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x24044804) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0x21) [ 2398.389257] R13: 00007ffe4a30229f R14: 00007ffa0a6fd300 R15: 0000000000022000 17:10:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x54, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044051}, 0x40000) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x4, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20008000) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000014) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x54, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044051}, 0x40000) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) (async) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x4, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20008000) (async) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000014) (async) 17:10:13 executing program 1: r0 = socket(0x28, 0xa, 0x81) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0x7f}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6c2f0371}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_bond\x00'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7f}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7356}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x24044804) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0x21) 17:10:13 executing program 5: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2db}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7461ca6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x944}, 0x4) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000001c0), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000200), 0x4) (async, rerun: 32) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) (async) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r3) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (rerun: 32) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7, 0x8000, 0x1, 0x2, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x67, 0x0, 0xfb, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @remote, {[@ssrr={0x89, 0xf, 0x95, [@rand_addr=0x64010102, @empty, @empty]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000), 0xc, &(0x7f0000000480)={&(0x7f0000000180)={0x2c8, 0x0, 0x200, 0x70bd25, 0x8, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8958}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x15c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}}]}}]}, 0x2c8}}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) 17:10:13 executing program 2: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={&(0x7f0000000240), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000180)=0x5) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000140), 0x10) perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x9f, 0x9, 0x3, 0x53, 0x0, 0xfffffffffffffff7, 0x5000, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x81, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x4000, 0x4, 0x3, 0x2, 0x4, 0x10001, 0x3ff, 0x0, 0x1ff, 0x0, 0xb38}, 0xffffffffffffffff, 0x5, r1, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0xff, 0x64000) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000200)={0x2, 0x1000, &(0x7f0000000340)="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"}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000480), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000013c0)={'sit0\x00', &(0x7f0000001340)={'ip_vti0\x00', r7, 0x7800, 0x700, 0xffffff7f, 0x1, {{0x12, 0x4, 0x1, 0x1e, 0x48, 0x65, 0x0, 0x2e, 0x4, 0x0, @broadcast, @local, {[@rr={0x7, 0x17, 0xdf, [@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @loopback]}, @timestamp_prespec={0x44, 0x14, 0x2f, 0x3, 0x2, [{@broadcast, 0x4}, {@remote, 0x5}]}, @rr={0x7, 0x7, 0xe, [@dev={0xac, 0x14, 0x14, 0x12}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) ioctl$PTP_PIN_SETFUNC(r3, 0x40603d07, &(0x7f0000000280)={'\x00', 0x9, 0x225d751ff531e966, 0xffffffff}) [ 2398.475763] FAULT_INJECTION: forcing a failure. [ 2398.475763] name failslab, interval 1, probability 0, space 0, times 0 [ 2398.505657] FAULT_INJECTION: forcing a failure. [ 2398.505657] name failslab, interval 1, probability 0, space 0, times 0 17:10:13 executing program 5: sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x696469c8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040880}, 0x4000) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000100)=""/12) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x3, 0x1f, 0x0, 0x0, 0xff, 0x25409, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x101, 0x6952}, 0x0, 0x7fffffffffffffff, 0x7ff, 0x9, 0x400, 0x8, 0x2, 0x0, 0x401, 0x0, 0x9}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0x4, 0x0, 0x3f, 0x7f, 0x0, 0x8, 0x8200, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x7, 0x8}, 0x10502, 0x6, 0x200, 0x2, 0x7, 0x7, 0x1, 0x0, 0x67a4, 0x0, 0x2091}, r1, 0xf, r0, 0x0) [ 2398.541470] CPU: 1 PID: 4382 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2398.549284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2398.558645] Call Trace: [ 2398.561235] dump_stack+0x1b2/0x281 [ 2398.564873] should_fail.cold+0x10a/0x149 [ 2398.569027] should_failslab+0xd6/0x130 [ 2398.573008] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2398.578117] __kmalloc_node+0x38/0x70 [ 2398.581933] blk_mq_alloc_tag_set+0x27c/0x910 [ 2398.586433] loop_add+0x2a0/0x830 17:10:13 executing program 1: r0 = socket(0x28, 0xa, 0x81) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0x7f}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6c2f0371}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_bond\x00'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7f}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7356}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x24044804) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0x21) [ 2398.589891] ? loop_queue_rq+0x280/0x280 [ 2398.593953] ? trace_hardirqs_on+0x10/0x10 [ 2398.598190] loop_control_ioctl+0x161/0x3f0 [ 2398.602517] ? loop_lookup+0x190/0x190 [ 2398.606404] ? SyS_write+0x1b7/0x210 [ 2398.610113] ? loop_lookup+0x190/0x190 [ 2398.613998] do_vfs_ioctl+0x75a/0xff0 [ 2398.617797] ? lock_acquire+0x170/0x3f0 [ 2398.621773] ? ioctl_preallocate+0x1a0/0x1a0 [ 2398.626180] ? __fget+0x265/0x3e0 [ 2398.629632] ? do_vfs_ioctl+0xff0/0xff0 [ 2398.633609] ? security_file_ioctl+0x83/0xb0 [ 2398.638013] SyS_ioctl+0x7f/0xb0 [ 2398.641376] ? do_vfs_ioctl+0xff0/0xff0 [ 2398.645354] do_syscall_64+0x1d5/0x640 [ 2398.649245] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2398.654430] RIP: 0033:0x7ffa0bda9109 [ 2398.658128] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2398.665819] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2398.673071] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2398.680324] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2398.687585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2398.694844] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 [ 2398.702125] CPU: 0 PID: 4390 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 2398.709925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2398.719283] Call Trace: [ 2398.721880] dump_stack+0x1b2/0x281 [ 2398.725505] should_fail.cold+0x10a/0x149 [ 2398.729645] should_failslab+0xd6/0x130 [ 2398.733692] kmem_cache_alloc_trace+0x29a/0x3d0 [ 2398.738345] ? kmem_cache_alloc+0x35f/0x3c0 [ 2398.742652] sock_alloc_inode+0x5f/0x250 [ 2398.746690] ? sock_destroy_inode+0x60/0x60 [ 2398.750991] alloc_inode+0x5d/0x170 [ 2398.754598] new_inode_pseudo+0x14/0xe0 [ 2398.758549] sock_alloc+0x3c/0x270 [ 2398.762180] __sock_create+0x8a/0x620 [ 2398.765957] SyS_socket+0xd1/0x1b0 [ 2398.769488] ? move_addr_to_kernel+0x60/0x60 [ 2398.773872] ? __do_page_fault+0x159/0xad0 [ 2398.778095] ? do_syscall_64+0x4c/0x640 [ 2398.782048] ? move_addr_to_kernel+0x60/0x60 [ 2398.786476] do_syscall_64+0x1d5/0x640 [ 2398.790344] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2398.795512] RIP: 0033:0x7f436bbd8109 [ 2398.799199] RSP: 002b:00007f436a54d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2398.806889] RAX: ffffffffffffffda RBX: 00007f436bceaf60 RCX: 00007f436bbd8109 [ 2398.814164] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000022 [ 2398.821410] RBP: 00007f436a54d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2398.828673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 17:10:14 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 3) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:14 executing program 5: sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x696469c8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040880}, 0x4000) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000100)=""/12) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x3, 0x1f, 0x0, 0x0, 0xff, 0x25409, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x101, 0x6952}, 0x0, 0x7fffffffffffffff, 0x7ff, 0x9, 0x400, 0x8, 0x2, 0x0, 0x401, 0x0, 0x9}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0x4, 0x0, 0x3f, 0x7f, 0x0, 0x8, 0x8200, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x7, 0x8}, 0x10502, 0x6, 0x200, 0x2, 0x7, 0x7, 0x1, 0x0, 0x67a4, 0x0, 0x2091}, r1, 0xf, r0, 0x0) 17:10:14 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000000100)={&(0x7f0000000040), 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "11b297766ee01fff"}, 0x10}, 0x1, 0x0, 0x0, 0x2000800}, 0x24040000) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) 17:10:14 executing program 2: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={&(0x7f0000000240), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000180)=0x5) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000140), 0x10) perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x9f, 0x9, 0x3, 0x53, 0x0, 0xfffffffffffffff7, 0x5000, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x81, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x4000, 0x4, 0x3, 0x2, 0x4, 0x10001, 0x3ff, 0x0, 0x1ff, 0x0, 0xb38}, 0xffffffffffffffff, 0x5, r1, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0xff, 0x64000) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000200)={0x2, 0x1000, &(0x7f0000000340)="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"}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000480), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000013c0)={'sit0\x00', &(0x7f0000001340)={'ip_vti0\x00', r7, 0x7800, 0x700, 0xffffff7f, 0x1, {{0x12, 0x4, 0x1, 0x1e, 0x48, 0x65, 0x0, 0x2e, 0x4, 0x0, @broadcast, @local, {[@rr={0x7, 0x17, 0xdf, [@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @loopback]}, @timestamp_prespec={0x44, 0x14, 0x2f, 0x3, 0x2, [{@broadcast, 0x4}, {@remote, 0x5}]}, @rr={0x7, 0x7, 0xe, [@dev={0xac, 0x14, 0x14, 0x12}]}, @noop]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) (async) ioctl$PTP_PIN_SETFUNC(r3, 0x40603d07, &(0x7f0000000280)={'\x00', 0x9, 0x225d751ff531e966, 0xffffffff}) 17:10:14 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) (fail_nth: 3) 17:10:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x54, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044051}, 0x40000) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (async, rerun: 64) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) (rerun: 64) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x4, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20008000) (async, rerun: 32) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000014) (rerun: 32) [ 2398.835925] R13: 00007ffec0f54d3f R14: 00007f436a54d300 R15: 0000000000022000 [ 2398.851521] socket: no more sockets 17:10:14 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000000100)={&(0x7f0000000040), 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "11b297766ee01fff"}, 0x10}, 0x1, 0x0, 0x0, 0x2000800}, 0x24040000) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) 17:10:14 executing program 5: sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x696469c8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040880}, 0x4000) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000100)=""/12) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x3, 0x1f, 0x0, 0x0, 0xff, 0x25409, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x101, 0x6952}, 0x0, 0x7fffffffffffffff, 0x7ff, 0x9, 0x400, 0x8, 0x2, 0x0, 0x401, 0x0, 0x9}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0x4, 0x0, 0x3f, 0x7f, 0x0, 0x8, 0x8200, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x7, 0x8}, 0x10502, 0x6, 0x200, 0x2, 0x7, 0x7, 0x1, 0x0, 0x67a4, 0x0, 0x2091}, r1, 0xf, r0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x696469c8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040880}, 0x4000) (async) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000100)=""/12) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x3, 0x1f, 0x0, 0x0, 0xff, 0x25409, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x101, 0x6952}, 0x0, 0x7fffffffffffffff, 0x7ff, 0x9, 0x400, 0x8, 0x2, 0x0, 0x401, 0x0, 0x9}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0x4, 0x0, 0x3f, 0x7f, 0x0, 0x8, 0x8200, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x7, 0x8}, 0x10502, 0x6, 0x200, 0x2, 0x7, 0x7, 0x1, 0x0, 0x67a4, 0x0, 0x2091}, r1, 0xf, r0, 0x0) (async) 17:10:14 executing program 2: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={&(0x7f0000000240), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000180)=0x5) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000140), 0x10) perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x9f, 0x9, 0x3, 0x53, 0x0, 0xfffffffffffffff7, 0x5000, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x81, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x4000, 0x4, 0x3, 0x2, 0x4, 0x10001, 0x3ff, 0x0, 0x1ff, 0x0, 0xb38}, 0xffffffffffffffff, 0x5, r1, 0x0) (async) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0xff, 0x64000) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000200)={0x2, 0x1000, &(0x7f0000000340)="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"}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) (async) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000480), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000013c0)={'sit0\x00', &(0x7f0000001340)={'ip_vti0\x00', r7, 0x7800, 0x700, 0xffffff7f, 0x1, {{0x12, 0x4, 0x1, 0x1e, 0x48, 0x65, 0x0, 0x2e, 0x4, 0x0, @broadcast, @local, {[@rr={0x7, 0x17, 0xdf, [@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @loopback]}, @timestamp_prespec={0x44, 0x14, 0x2f, 0x3, 0x2, [{@broadcast, 0x4}, {@remote, 0x5}]}, @rr={0x7, 0x7, 0xe, [@dev={0xac, 0x14, 0x14, 0x12}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) ioctl$PTP_PIN_SETFUNC(r3, 0x40603d07, &(0x7f0000000280)={'\x00', 0x9, 0x225d751ff531e966, 0xffffffff}) [ 2398.914195] FAULT_INJECTION: forcing a failure. [ 2398.914195] name failslab, interval 1, probability 0, space 0, times 0 [ 2398.933548] FAULT_INJECTION: forcing a failure. [ 2398.933548] name failslab, interval 1, probability 0, space 0, times 0 [ 2398.968063] CPU: 1 PID: 4421 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2398.975885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2398.985240] Call Trace: [ 2398.987837] dump_stack+0x1b2/0x281 [ 2398.991477] should_fail.cold+0x10a/0x149 [ 2398.995634] should_failslab+0xd6/0x130 [ 2398.999613] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2399.004724] __kmalloc_node+0x38/0x70 [ 2399.008532] blk_mq_alloc_tag_set+0x30f/0x910 [ 2399.013133] loop_add+0x2a0/0x830 17:10:14 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x200, 0x2, 0xb06, 0x612, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x48) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xf2, 0x310, 0x3, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x6}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000100)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x5, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xb3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x4, 0x2, 0x10001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r2]}, 0x80) 17:10:14 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000000100)={&(0x7f0000000040), 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "11b297766ee01fff"}, 0x10}, 0x1, 0x0, 0x0, 0x2000800}, 0x24040000) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) 17:10:14 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x620800) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000080)=""/38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0xfffffffe, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) [ 2399.016595] ? loop_queue_rq+0x280/0x280 [ 2399.020654] ? trace_hardirqs_on+0x10/0x10 [ 2399.024896] loop_control_ioctl+0x161/0x3f0 [ 2399.029215] ? loop_lookup+0x190/0x190 [ 2399.033100] ? SyS_write+0x1b7/0x210 [ 2399.036819] ? loop_lookup+0x190/0x190 [ 2399.040704] do_vfs_ioctl+0x75a/0xff0 [ 2399.044509] ? lock_acquire+0x170/0x3f0 [ 2399.048486] ? ioctl_preallocate+0x1a0/0x1a0 [ 2399.052891] ? __fget+0x265/0x3e0 [ 2399.056337] ? do_vfs_ioctl+0xff0/0xff0 [ 2399.060300] ? security_file_ioctl+0x83/0xb0 [ 2399.064695] SyS_ioctl+0x7f/0xb0 [ 2399.068078] ? do_vfs_ioctl+0xff0/0xff0 [ 2399.072057] do_syscall_64+0x1d5/0x640 [ 2399.075940] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2399.081108] RIP: 0033:0x7ffa0bda9109 [ 2399.084798] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2399.092492] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2399.099747] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2399.107000] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2399.114260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2399.121527] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 [ 2399.129170] CPU: 0 PID: 4428 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 2399.136975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2399.146326] Call Trace: [ 2399.148952] dump_stack+0x1b2/0x281 [ 2399.152580] should_fail.cold+0x10a/0x149 [ 2399.156734] should_failslab+0xd6/0x130 [ 2399.160726] __kmalloc+0x2c1/0x400 [ 2399.164254] ? sk_prot_alloc+0x1ba/0x290 [ 2399.168293] sk_prot_alloc+0x1ba/0x290 [ 2399.172157] sk_alloc+0x36/0xcd0 [ 2399.175513] mISDN_sock_create+0xa5/0x390 [ 2399.179657] __sock_create+0x303/0x620 [ 2399.183522] SyS_socket+0xd1/0x1b0 [ 2399.187039] ? move_addr_to_kernel+0x60/0x60 [ 2399.191454] ? __do_page_fault+0x159/0xad0 [ 2399.195664] ? do_syscall_64+0x4c/0x640 [ 2399.199626] ? move_addr_to_kernel+0x60/0x60 [ 2399.204010] do_syscall_64+0x1d5/0x640 [ 2399.207887] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2399.213069] RIP: 0033:0x7f436bbd8109 17:10:14 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 4) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:14 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x620800) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000080)=""/38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0xfffffffe, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) 17:10:14 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="8400000000080103000000000000000007000001060002400006000005000300000000000900010073799d30000000000c00048008000140000000050600024000f7000005000300000000000900010073797a30000000000600024088470000240004800800014000001000080002400000000208000240000000060800014000000fff"], 0x84}, 0x1, 0x0, 0x0, 0x944}, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000001c0), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000200), 0x4) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r3) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r5}, 0x10) 17:10:14 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x200, 0x2, 0xb06, 0x612, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x48) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xf2, 0x310, 0x3, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x6}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000100)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x5, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xb3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x4, 0x2, 0x10001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r2]}, 0x80) 17:10:14 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) (fail_nth: 4) 17:10:14 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7, 0x8000, 0x6, 0x2, {{0xe, 0x4, 0x2, 0x2, 0x38, 0xcd32, 0x0, 0x40, 0x2f, 0x0, @remote, @remote, {[@ssrr={0x89, 0x13, 0xc0, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @generic={0x83, 0x10, "d52ce4891c1cca42b9b45e600399"}]}}}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0xb, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x0, 0xc, 0x9, 0xb, 0x20, 0x1}, @jmp={0x5, 0x1, 0x0, 0x4, 0x6, 0x2, 0xfffffffffffffff3}, @exit, @jmp={0x5, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffff8, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x9a}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xd}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}], &(0x7f0000000100)='GPL\x00', 0x50f, 0xd, &(0x7f0000000140)=""/13, 0x40f00, 0x18, '\x00', r0, 0x0, r1, 0x8, &(0x7f0000000280)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x4, 0x755e5b82, 0x3}, 0x10, 0x142f}, 0x80) [ 2399.216756] RSP: 002b:00007f436a54d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2399.224442] RAX: ffffffffffffffda RBX: 00007f436bceaf60 RCX: 00007f436bbd8109 [ 2399.231690] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000022 [ 2399.239033] RBP: 00007f436a54d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2399.246280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2399.253539] R13: 00007ffec0f54d3f R14: 00007f436a54d300 R15: 0000000000022000 17:10:14 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x620800) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000080)=""/38) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0xfffffffe, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) 17:10:14 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x200, 0x2, 0xb06, 0x612, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x48) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xf2, 0x310, 0x3, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x6}, 0x48) (rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000100)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x5, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xb3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x4, 0x2, 0x10001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r2]}, 0x80) 17:10:14 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7, 0x8000, 0x6, 0x2, {{0xe, 0x4, 0x2, 0x2, 0x38, 0xcd32, 0x0, 0x40, 0x2f, 0x0, @remote, @remote, {[@ssrr={0x89, 0x13, 0xc0, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @generic={0x83, 0x10, "d52ce4891c1cca42b9b45e600399"}]}}}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0xb, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x0, 0xc, 0x9, 0xb, 0x20, 0x1}, @jmp={0x5, 0x1, 0x0, 0x4, 0x6, 0x2, 0xfffffffffffffff3}, @exit, @jmp={0x5, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffff8, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x9a}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xd}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}], &(0x7f0000000100)='GPL\x00', 0x50f, 0xd, &(0x7f0000000140)=""/13, 0x40f00, 0x18, '\x00', r0, 0x0, r1, 0x8, &(0x7f0000000280)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x4, 0x755e5b82, 0x3}, 0x10, 0x142f}, 0x80) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7, 0x8000, 0x6, 0x2, {{0xe, 0x4, 0x2, 0x2, 0x38, 0xcd32, 0x0, 0x40, 0x2f, 0x0, @remote, @remote, {[@ssrr={0x89, 0x13, 0xc0, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @generic={0x83, 0x10, "d52ce4891c1cca42b9b45e600399"}]}}}}}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0xb, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x0, 0xc, 0x9, 0xb, 0x20, 0x1}, @jmp={0x5, 0x1, 0x0, 0x4, 0x6, 0x2, 0xfffffffffffffff3}, @exit, @jmp={0x5, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffff8, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x9a}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xd}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}], &(0x7f0000000100)='GPL\x00', 0x50f, 0xd, &(0x7f0000000140)=""/13, 0x40f00, 0x18, '\x00', r0, 0x0, r1, 0x8, &(0x7f0000000280)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x4, 0x755e5b82, 0x3}, 0x10, 0x142f}, 0x80) (async) [ 2399.342416] FAULT_INJECTION: forcing a failure. [ 2399.342416] name failslab, interval 1, probability 0, space 0, times 0 [ 2399.355497] FAULT_INJECTION: forcing a failure. [ 2399.355497] name failslab, interval 1, probability 0, space 0, times 0 [ 2399.366964] CPU: 0 PID: 4473 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2399.366971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2399.366975] Call Trace: [ 2399.366990] dump_stack+0x1b2/0x281 [ 2399.367007] should_fail.cold+0x10a/0x149 [ 2399.367021] should_failslab+0xd6/0x130 [ 2399.367034] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2399.367050] blk_mq_init_tags+0x5e/0x280 [ 2399.367061] blk_mq_alloc_rq_map+0x90/0x220 [ 2399.367072] __blk_mq_alloc_rq_map+0xa3/0x3a0 [ 2399.367086] blk_mq_alloc_tag_set+0x4ac/0x910 [ 2399.367100] loop_add+0x2a0/0x830 [ 2399.367109] ? loop_queue_rq+0x280/0x280 [ 2399.367118] ? trace_hardirqs_on+0x10/0x10 [ 2399.367131] loop_control_ioctl+0x161/0x3f0 [ 2399.367139] ? loop_lookup+0x190/0x190 [ 2399.367147] ? SyS_write+0x1b7/0x210 [ 2399.367158] ? loop_lookup+0x190/0x190 [ 2399.448785] do_vfs_ioctl+0x75a/0xff0 [ 2399.452582] ? lock_acquire+0x170/0x3f0 [ 2399.456546] ? ioctl_preallocate+0x1a0/0x1a0 [ 2399.460942] ? __fget+0x265/0x3e0 [ 2399.464466] ? do_vfs_ioctl+0xff0/0xff0 [ 2399.468431] ? security_file_ioctl+0x83/0xb0 [ 2399.472822] SyS_ioctl+0x7f/0xb0 [ 2399.476168] ? do_vfs_ioctl+0xff0/0xff0 [ 2399.480127] do_syscall_64+0x1d5/0x640 [ 2399.484001] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2399.489172] RIP: 0033:0x7ffa0bda9109 [ 2399.492860] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2399.500549] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2399.507813] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2399.515062] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2399.522414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2399.529672] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 [ 2399.536942] CPU: 1 PID: 4474 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 2399.544776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2399.545149] blk-mq: reduced tag depth (128 -> 64) [ 2399.554118] Call Trace: [ 2399.554134] dump_stack+0x1b2/0x281 [ 2399.554149] should_fail.cold+0x10a/0x149 [ 2399.554161] should_failslab+0xd6/0x130 [ 2399.554172] kmem_cache_alloc+0x28e/0x3c0 [ 2399.554183] __d_alloc+0x2a/0xa20 [ 2399.554200] sock_alloc_file+0xc8/0x2e0 [ 2399.554209] ? sock_poll+0x220/0x220 [ 2399.554223] SyS_socket+0x108/0x1b0 17:10:14 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 17:10:15 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="8400000000080103000000000000000007000001060002400006000005000300000000000900010073799d30000000000c00048008000140000000050600024000f7000005000300000000000900010073797a30000000000600024088470000240004800800014000001000080002400000000208000240000000060800014000000fff"], 0x84}, 0x1, 0x0, 0x0, 0x944}, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000001c0), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000200), 0x4) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r3) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r5}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="8400000000080103000000000000000007000001060002400006000005000300000000000900010073799d30000000000c00048008000140000000050600024000f7000005000300000000000900010073797a30000000000600024088470000240004800800014000001000080002400000000208000240000000060800014000000fff"], 0x84}, 0x1, 0x0, 0x0, 0x944}, 0x4) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000001c0), 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000200), 0x4) (async) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) (async) syz_genetlink_get_family_id$team(&(0x7f0000000480), r3) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r5}, 0x10) (async) [ 2399.554233] ? move_addr_to_kernel+0x60/0x60 [ 2399.554246] ? __do_page_fault+0x159/0xad0 [ 2399.600997] ? do_syscall_64+0x4c/0x640 [ 2399.604973] ? move_addr_to_kernel+0x60/0x60 [ 2399.609382] do_syscall_64+0x1d5/0x640 [ 2399.613284] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2399.618472] RIP: 0033:0x7f436bbd8109 [ 2399.622179] RSP: 002b:00007f436a54d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2399.629892] RAX: ffffffffffffffda RBX: 00007f436bceaf60 RCX: 00007f436bbd8109 17:10:15 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 5) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:15 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7, 0x8000, 0x6, 0x2, {{0xe, 0x4, 0x2, 0x2, 0x38, 0xcd32, 0x0, 0x40, 0x2f, 0x0, @remote, @remote, {[@ssrr={0x89, 0x13, 0xc0, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @generic={0x83, 0x10, "d52ce4891c1cca42b9b45e600399"}]}}}}}) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0xb, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x0, 0xc, 0x9, 0xb, 0x20, 0x1}, @jmp={0x5, 0x1, 0x0, 0x4, 0x6, 0x2, 0xfffffffffffffff3}, @exit, @jmp={0x5, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffff8, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x9a}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xd}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}], &(0x7f0000000100)='GPL\x00', 0x50f, 0xd, &(0x7f0000000140)=""/13, 0x40f00, 0x18, '\x00', r0, 0x0, r1, 0x8, &(0x7f0000000280)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x4, 0x755e5b82, 0x3}, 0x10, 0x142f}, 0x80) 17:10:15 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x303403, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f00000000c0)={{0x6b97, 0x4}, {0x1b39, 0x80000001}, 0x1}) 17:10:15 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="8400000000080103000000000000000007000001060002400006000005000300000000000900010073799d30000000000c00048008000140000000050600024000f7000005000300000000000900010073797a30000000000600024088470000240004800800014000001000080002400000000208000240000000060800014000000fff"], 0x84}, 0x1, 0x0, 0x0, 0x944}, 0x4) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000001c0), 0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000200), 0x4) (async, rerun: 32) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) (rerun: 32) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) (async) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r3) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (rerun: 64) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r5}, 0x10) [ 2399.637158] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000022 [ 2399.644426] RBP: 00007f436a54d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2399.651693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2399.658962] R13: 00007ffec0f54d3f R14: 00007f436a54d300 R15: 0000000000022000 17:10:15 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2db}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7461ca6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x944}, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000001c0), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000200), 0x4) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r4) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r6}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8050}, 0x40080) 17:10:15 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) (fail_nth: 5) 17:10:15 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (async) 17:10:15 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x303403, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f00000000c0)={{0x6b97, 0x4}, {0x1b39, 0x80000001}, 0x1}) [ 2399.747983] FAULT_INJECTION: forcing a failure. [ 2399.747983] name failslab, interval 1, probability 0, space 0, times 0 [ 2399.782138] CPU: 1 PID: 4529 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 2399.785616] FAULT_INJECTION: forcing a failure. [ 2399.785616] name failslab, interval 1, probability 0, space 0, times 0 [ 2399.789966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2399.789971] Call Trace: [ 2399.789987] dump_stack+0x1b2/0x281 [ 2399.790002] should_fail.cold+0x10a/0x149 [ 2399.790022] should_failslab+0xd6/0x130 [ 2399.824929] kmem_cache_alloc+0x28e/0x3c0 [ 2399.829071] get_empty_filp+0x86/0x3f0 [ 2399.832948] alloc_file+0x23/0x440 [ 2399.836487] sock_alloc_file+0x113/0x2e0 [ 2399.840547] ? sock_poll+0x220/0x220 [ 2399.844258] SyS_socket+0x108/0x1b0 [ 2399.847873] ? move_addr_to_kernel+0x60/0x60 [ 2399.852262] ? __do_page_fault+0x159/0xad0 [ 2399.856485] ? do_syscall_64+0x4c/0x640 [ 2399.860441] ? move_addr_to_kernel+0x60/0x60 [ 2399.864840] do_syscall_64+0x1d5/0x640 [ 2399.868727] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2399.873912] RIP: 0033:0x7f436bbd8109 [ 2399.877616] RSP: 002b:00007f436a54d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2399.885409] RAX: ffffffffffffffda RBX: 00007f436bceaf60 RCX: 00007f436bbd8109 17:10:15 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x303403, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f00000000c0)={{0x6b97, 0x4}, {0x1b39, 0x80000001}, 0x1}) 17:10:15 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2db}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7461ca6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x944}, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000001c0), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000200), 0x4) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r4) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r6}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8050}, 0x40080) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2db}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7461ca6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x944}, 0x4) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000001c0), 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000200), 0x4) (async) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) (async) syz_genetlink_get_family_id$team(&(0x7f0000000480), r4) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000004c0)) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r6}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8050}, 0x40080) (async) [ 2399.892675] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000022 [ 2399.899945] RBP: 00007f436a54d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2399.907219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2399.914493] R13: 00007ffec0f54d3f R14: 00007f436a54d300 R15: 0000000000022000 17:10:15 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) (fail_nth: 6) 17:10:15 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) [ 2399.974927] CPU: 0 PID: 4534 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2399.982745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2399.992281] Call Trace: [ 2399.994866] dump_stack+0x1b2/0x281 [ 2399.996060] FAULT_INJECTION: forcing a failure. [ 2399.996060] name failslab, interval 1, probability 0, space 0, times 0 [ 2399.998505] should_fail.cold+0x10a/0x149 [ 2399.998520] should_failslab+0xd6/0x130 [ 2399.998537] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2400.022899] __kmalloc_node+0x38/0x70 [ 2400.026688] sbitmap_init_node+0x10c/0x3d0 [ 2400.030922] sbitmap_queue_init_node+0x37/0x5d0 [ 2400.035574] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2400.040571] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 2400.045836] blk_mq_init_tags+0xf4/0x280 [ 2400.049896] blk_mq_alloc_rq_map+0x90/0x220 [ 2400.054202] __blk_mq_alloc_rq_map+0xa3/0x3a0 [ 2400.058679] blk_mq_alloc_tag_set+0x4ac/0x910 [ 2400.063682] loop_add+0x2a0/0x830 [ 2400.067118] ? loop_queue_rq+0x280/0x280 [ 2400.071163] ? trace_hardirqs_on+0x10/0x10 [ 2400.075397] loop_control_ioctl+0x161/0x3f0 [ 2400.079712] ? loop_lookup+0x190/0x190 [ 2400.083591] ? SyS_write+0x1b7/0x210 [ 2400.087292] ? loop_lookup+0x190/0x190 [ 2400.091170] do_vfs_ioctl+0x75a/0xff0 [ 2400.094959] ? lock_acquire+0x170/0x3f0 [ 2400.098918] ? ioctl_preallocate+0x1a0/0x1a0 [ 2400.103316] ? __fget+0x265/0x3e0 [ 2400.106770] ? do_vfs_ioctl+0xff0/0xff0 [ 2400.110727] ? security_file_ioctl+0x83/0xb0 [ 2400.115122] SyS_ioctl+0x7f/0xb0 [ 2400.118470] ? do_vfs_ioctl+0xff0/0xff0 [ 2400.122430] do_syscall_64+0x1d5/0x640 [ 2400.126308] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2400.131493] RIP: 0033:0x7ffa0bda9109 [ 2400.135271] RSP: 002b:00007ffa0a6fd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2400.142969] RAX: ffffffffffffffda RBX: 00007ffa0bebc030 RCX: 00007ffa0bda9109 [ 2400.150235] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2400.157485] RBP: 00007ffa0a6fd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2400.164738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2400.171987] R13: 00007ffe4a30229f R14: 00007ffa0a6fd300 R15: 0000000000022000 [ 2400.179262] CPU: 1 PID: 4571 Comm: syz-executor.3 Not tainted 4.14.288-syzkaller #0 [ 2400.187062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2400.196415] Call Trace: [ 2400.199008] dump_stack+0x1b2/0x281 [ 2400.202643] should_fail.cold+0x10a/0x149 [ 2400.206812] should_failslab+0xd6/0x130 [ 2400.206948] blk-mq: reduced tag depth (128 -> 64) [ 2400.210783] kmem_cache_alloc_trace+0x29a/0x3d0 [ 2400.210803] apparmor_file_alloc_security+0x129/0x800 [ 2400.210818] security_file_alloc+0x66/0xa0 [ 2400.229702] ? selinux_is_enabled+0x5/0x50 [ 2400.233944] get_empty_filp+0x16b/0x3f0 [ 2400.237927] alloc_file+0x23/0x440 [ 2400.241476] sock_alloc_file+0x113/0x2e0 [ 2400.245540] ? sock_poll+0x220/0x220 [ 2400.249261] SyS_socket+0x108/0x1b0 [ 2400.252889] ? move_addr_to_kernel+0x60/0x60 [ 2400.257295] ? __do_page_fault+0x159/0xad0 [ 2400.261529] ? do_syscall_64+0x4c/0x640 [ 2400.265503] ? move_addr_to_kernel+0x60/0x60 [ 2400.269914] do_syscall_64+0x1d5/0x640 [ 2400.273801] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2400.278970] RIP: 0033:0x7f436bbd8109 [ 2400.282665] RSP: 002b:00007f436a54d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2400.290356] RAX: ffffffffffffffda RBX: 00007f436bceaf60 RCX: 00007f436bbd8109 [ 2400.297696] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000022 [ 2400.305035] RBP: 00007f436a54d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2400.312380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 17:10:15 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 6) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:15 executing program 1: sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2db}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7461ca6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x944}, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000001c0), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000200), 0x4) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000001c0)={0x36c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff22c}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2166}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x36c}}, 0x80) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f00000000c0), 0x21) 17:10:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400005323d5177bb216e9000000000001000000"], 0x14}}, 0x20000041) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000040)=0x10001, 0x4) 17:10:15 executing program 5: ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000080)={'\x00', 0x9, 0x0, 0x10001}) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x282880, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000140)={0x3, 0x9, 0x7f, 0x8, 0x0, 0x3}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x1a0000) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000001c0)=""/212) 17:10:15 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2db}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7461ca6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x944}, 0x4) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000001c0), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000200), 0x4) (async) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) (async) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r4) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r6}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8050}, 0x40080) 17:10:15 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) (fail_nth: 7) [ 2400.319654] R13: 00007ffec0f54d3f R14: 00007f436a54d300 R15: 0000000000022000 17:10:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400005323d5177bb216e9000000000001000000"], 0x14}}, 0x20000041) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000040)=0x10001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400005323d5177bb216e9000000000001000000"], 0x14}}, 0x20000041) (async) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000040)=0x10001, 0x4) (async) 17:10:15 executing program 5: ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000080)={'\x00', 0x9, 0x0, 0x10001}) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x282880, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000140)={0x3, 0x9, 0x7f, 0x8, 0x0, 0x3}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x1a0000) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000001c0)=""/212) 17:10:15 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x844, 0x7ba1b7a1dbf36a03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x100) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00000000c0)=""/49) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)) io_submit(0x0, 0x3, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x400, r2, &(0x7f0000000140), 0x0, 0x7, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x100, 0xffffffffffffffff, &(0x7f00000001c0)="f17783c17d96cc5eb853f222cbdc4932a7b72c0d1b4ff5edeb01f31b09b501e00bb5f5b982300bb307a7cb62a96464759cea46ce2832d5d59892a40b06da9c35a1ef55eace44365045cabfc62e7b47e43a030260dd92ffed4cbbe941284467385da88c720ba4bfcaa77f9b3445046b9227d7804485", 0x75, 0x1ff}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x4, r0, &(0x7f0000000280)="ffe41ee1fa475d7cc1267475efa8a0c2ee930465f38585ba302a91f8ab0fd595aecff15a196daa107388eb1f07605157aced6a38cb5d2f0ae3f0c82cd8374d53daf356c026c2e22a5fad2db797169581a65021e7d04d2bb92deec037fc668f80f7a2", 0x62, 0x9}]) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000600), 0x200, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000640)=""/4096) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000580)=0xce) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000100)=[0x0, 0x38000000]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x104, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0xed, 0x6, "48d808ce13c8bd97d9da223137dcce60cea96a9ede86138a8d6f805f9bb687b47f9cede5671062a2c455cdcd1543353dcbfdceb787cf847317ff83a7c2e5498f86a3ae13dfbbe1ea25b119c5f551ad85555f527782f18582dbce516b1e73230b7fa5041d3446cba7a3dbd960a7bebe12bb7823cda6b68c68a9a47f0eda1efe940fae2cd86d3dd9a07f70a496f095b77c3f92f93237eb83937dd513e6e5e626b43d01f71a42c3c2060338a695511b2846cae9407b4d977336f9dba4107a0feb7595256fb206fd02eb5c5e94f92f1db1dd2ca71c81305bcbbc0a56413a45cf15af0dd97fe3b2b5dfdc3d"}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x4040840) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000005c0)=[0x4, 0x1]) 17:10:15 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) 17:10:15 executing program 1: sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2db}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7461ca6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x944}, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000001c0), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000200), 0x4) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000001c0)={0x36c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff22c}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2166}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x36c}}, 0x80) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f00000000c0), 0x21) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2db}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7461ca6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x944}, 0x4) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000001c0), 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000200), 0x4) (async) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) (async) syz_genetlink_get_family_id$team(&(0x7f0000000480), r2) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000001c0)={0x36c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff22c}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2166}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x36c}}, 0x80) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f00000000c0), 0x21) (async) [ 2400.452032] FAULT_INJECTION: forcing a failure. [ 2400.452032] name failslab, interval 1, probability 0, space 0, times 0 [ 2400.475646] CPU: 1 PID: 4596 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2400.483472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2400.492830] Call Trace: [ 2400.495480] dump_stack+0x1b2/0x281 17:10:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400005323d5177bb216e9000000000001000000"], 0x14}}, 0x20000041) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000040)=0x10001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400005323d5177bb216e9000000000001000000"], 0x14}}, 0x20000041) (async) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000040)=0x10001, 0x4) (async) [ 2400.499199] should_fail.cold+0x10a/0x149 [ 2400.499213] should_failslab+0xd6/0x130 [ 2400.499229] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2400.512433] sbitmap_queue_init_node+0x27f/0x5d0 [ 2400.517190] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 2400.517206] blk_mq_init_tags+0xf4/0x280 [ 2400.517217] blk_mq_alloc_rq_map+0x90/0x220 [ 2400.530858] __blk_mq_alloc_rq_map+0xa3/0x3a0 [ 2400.535364] blk_mq_alloc_tag_set+0x4ac/0x910 [ 2400.539984] loop_add+0x2a0/0x830 [ 2400.543444] ? loop_queue_rq+0x280/0x280 [ 2400.547509] ? trace_hardirqs_on+0x10/0x10 [ 2400.551762] loop_control_ioctl+0x161/0x3f0 [ 2400.556203] ? loop_lookup+0x190/0x190 [ 2400.560092] ? SyS_write+0x1b7/0x210 [ 2400.563810] ? loop_lookup+0x190/0x190 [ 2400.567701] do_vfs_ioctl+0x75a/0xff0 [ 2400.571507] ? lock_acquire+0x170/0x3f0 [ 2400.575496] ? ioctl_preallocate+0x1a0/0x1a0 [ 2400.579894] ? __fget+0x265/0x3e0 [ 2400.583332] ? do_vfs_ioctl+0xff0/0xff0 [ 2400.587291] ? security_file_ioctl+0x83/0xb0 [ 2400.591687] SyS_ioctl+0x7f/0xb0 [ 2400.595033] ? do_vfs_ioctl+0xff0/0xff0 [ 2400.598986] do_syscall_64+0x1d5/0x640 [ 2400.602861] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2400.608049] RIP: 0033:0x7ffa0bda9109 [ 2400.611827] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2400.619522] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2400.626776] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2400.634036] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2400.641286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 17:10:16 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 7) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:16 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000180)={0x10}) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x20044000) 17:10:16 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x844, 0x7ba1b7a1dbf36a03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x100) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00000000c0)=""/49) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)) (async, rerun: 32) io_submit(0x0, 0x3, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x400, r2, &(0x7f0000000140), 0x0, 0x7, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x100, 0xffffffffffffffff, &(0x7f00000001c0)="f17783c17d96cc5eb853f222cbdc4932a7b72c0d1b4ff5edeb01f31b09b501e00bb5f5b982300bb307a7cb62a96464759cea46ce2832d5d59892a40b06da9c35a1ef55eace44365045cabfc62e7b47e43a030260dd92ffed4cbbe941284467385da88c720ba4bfcaa77f9b3445046b9227d7804485", 0x75, 0x1ff}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x4, r0, &(0x7f0000000280)="ffe41ee1fa475d7cc1267475efa8a0c2ee930465f38585ba302a91f8ab0fd595aecff15a196daa107388eb1f07605157aced6a38cb5d2f0ae3f0c82cd8374d53daf356c026c2e22a5fad2db797169581a65021e7d04d2bb92deec037fc668f80f7a2", 0x62, 0x9}]) (async, rerun: 32) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000600), 0x200, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000640)=""/4096) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000580)=0xce) (async) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000100)=[0x0, 0x38000000]) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x104, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0xed, 0x6, "48d808ce13c8bd97d9da223137dcce60cea96a9ede86138a8d6f805f9bb687b47f9cede5671062a2c455cdcd1543353dcbfdceb787cf847317ff83a7c2e5498f86a3ae13dfbbe1ea25b119c5f551ad85555f527782f18582dbce516b1e73230b7fa5041d3446cba7a3dbd960a7bebe12bb7823cda6b68c68a9a47f0eda1efe940fae2cd86d3dd9a07f70a496f095b77c3f92f93237eb83937dd513e6e5e626b43d01f71a42c3c2060338a695511b2846cae9407b4d977336f9dba4107a0feb7595256fb206fd02eb5c5e94f92f1db1dd2ca71c81305bcbbc0a56413a45cf15af0dd97fe3b2b5dfdc3d"}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x4040840) (async) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000005c0)=[0x4, 0x1]) 17:10:16 executing program 1: sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2db}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7461ca6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x944}, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000001c0), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000200), 0x4) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000001c0)={0x36c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff22c}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2166}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x36c}}, 0x80) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f00000000c0), 0x21) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2db}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7461ca6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x944}, 0x4) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000001c0), 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000200), 0x4) (async) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) (async) syz_genetlink_get_family_id$team(&(0x7f0000000480), r2) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000001c0)={0x36c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff22c}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2166}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x36c}}, 0x80) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f00000000c0), 0x21) (async) 17:10:16 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) 17:10:16 executing program 5: ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000080)={'\x00', 0x9, 0x0, 0x10001}) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x282880, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000140)={0x3, 0x9, 0x7f, 0x8, 0x0, 0x3}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x1a0000) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000001c0)=""/212) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000080)={'\x00', 0x9, 0x0, 0x10001}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x282880, 0x0) (async) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000140)={0x3, 0x9, 0x7f, 0x8, 0x0, 0x3}) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x1a0000) (async) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000001c0)=""/212) (async) [ 2400.648546] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 [ 2400.670586] blk-mq: reduced tag depth (128 -> 64) 17:10:16 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) 17:10:16 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x844, 0x7ba1b7a1dbf36a03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x100) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00000000c0)=""/49) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)) (async) io_submit(0x0, 0x3, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x400, r2, &(0x7f0000000140), 0x0, 0x7, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x100, 0xffffffffffffffff, &(0x7f00000001c0)="f17783c17d96cc5eb853f222cbdc4932a7b72c0d1b4ff5edeb01f31b09b501e00bb5f5b982300bb307a7cb62a96464759cea46ce2832d5d59892a40b06da9c35a1ef55eace44365045cabfc62e7b47e43a030260dd92ffed4cbbe941284467385da88c720ba4bfcaa77f9b3445046b9227d7804485", 0x75, 0x1ff}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x4, r0, &(0x7f0000000280)="ffe41ee1fa475d7cc1267475efa8a0c2ee930465f38585ba302a91f8ab0fd595aecff15a196daa107388eb1f07605157aced6a38cb5d2f0ae3f0c82cd8374d53daf356c026c2e22a5fad2db797169581a65021e7d04d2bb92deec037fc668f80f7a2", 0x62, 0x9}]) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000600), 0x200, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000640)=""/4096) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000580)=0xce) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000100)=[0x0, 0x38000000]) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x104, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0xed, 0x6, "48d808ce13c8bd97d9da223137dcce60cea96a9ede86138a8d6f805f9bb687b47f9cede5671062a2c455cdcd1543353dcbfdceb787cf847317ff83a7c2e5498f86a3ae13dfbbe1ea25b119c5f551ad85555f527782f18582dbce516b1e73230b7fa5041d3446cba7a3dbd960a7bebe12bb7823cda6b68c68a9a47f0eda1efe940fae2cd86d3dd9a07f70a496f095b77c3f92f93237eb83937dd513e6e5e626b43d01f71a42c3c2060338a695511b2846cae9407b4d977336f9dba4107a0feb7595256fb206fd02eb5c5e94f92f1db1dd2ca71c81305bcbbc0a56413a45cf15af0dd97fe3b2b5dfdc3d"}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x4040840) (async) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000005c0)=[0x4, 0x1]) 17:10:16 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000180)={0x10}) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x20044000) 17:10:16 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000080), 0x4) 17:10:16 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000180)={0x10}) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x20044000) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (async) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000180)={0x10}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x20044000) (async) 17:10:16 executing program 3: semget$private(0x0, 0x5, 0x101) socket$isdn_base(0x22, 0x3, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040)) socket$isdn_base(0x22, 0x3, 0x0) [ 2400.797502] FAULT_INJECTION: forcing a failure. [ 2400.797502] name failslab, interval 1, probability 0, space 0, times 0 [ 2400.848336] CPU: 1 PID: 4657 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2400.856167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2400.865530] Call Trace: [ 2400.865547] dump_stack+0x1b2/0x281 [ 2400.865559] should_fail.cold+0x10a/0x149 [ 2400.865573] should_failslab+0xd6/0x130 [ 2400.865585] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2400.865598] sbitmap_queue_init_node+0x27f/0x5d0 [ 2400.865610] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 2400.871799] blk_mq_init_tags+0x14b/0x280 [ 2400.871812] blk_mq_alloc_rq_map+0x90/0x220 [ 2400.871827] __blk_mq_alloc_rq_map+0xa3/0x3a0 [ 2400.871839] blk_mq_alloc_tag_set+0x4ac/0x910 [ 2400.912430] loop_add+0x2a0/0x830 [ 2400.915969] ? loop_queue_rq+0x280/0x280 [ 2400.920008] ? trace_hardirqs_on+0x10/0x10 [ 2400.924467] loop_control_ioctl+0x161/0x3f0 [ 2400.928983] ? loop_lookup+0x190/0x190 [ 2400.933029] ? SyS_write+0x1b7/0x210 [ 2400.936742] ? loop_lookup+0x190/0x190 [ 2400.940631] do_vfs_ioctl+0x75a/0xff0 [ 2400.944425] ? lock_acquire+0x170/0x3f0 [ 2400.948385] ? ioctl_preallocate+0x1a0/0x1a0 [ 2400.952807] ? __fget+0x265/0x3e0 [ 2400.956347] ? do_vfs_ioctl+0xff0/0xff0 [ 2400.960489] ? security_file_ioctl+0x83/0xb0 [ 2400.964888] SyS_ioctl+0x7f/0xb0 [ 2400.968241] ? do_vfs_ioctl+0xff0/0xff0 [ 2400.972201] do_syscall_64+0x1d5/0x640 [ 2400.976086] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2400.981259] RIP: 0033:0x7ffa0bda9109 [ 2400.984952] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:10:16 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 8) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:16 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040), 0x0) 17:10:16 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 17:10:16 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000080), 0x4) 17:10:16 executing program 3: semget$private(0x0, 0x5, 0x101) (async) socket$isdn_base(0x22, 0x3, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040)) (async) socket$isdn_base(0x22, 0x3, 0x0) 17:10:16 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2400.992733] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2401.000003] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2401.007255] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2401.014626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2401.021878] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 [ 2401.037763] blk-mq: reduced tag depth (128 -> 64) 17:10:16 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040), 0x0) 17:10:16 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 17:10:16 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000080), 0x4) (async) 17:10:16 executing program 3: semget$private(0x0, 0x5, 0x101) (async, rerun: 64) socket$isdn_base(0x22, 0x3, 0x0) (rerun: 64) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040)) (async) socket$isdn_base(0x22, 0x3, 0x0) 17:10:16 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:16 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040), 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040), 0x0) (async) [ 2401.168256] FAULT_INJECTION: forcing a failure. [ 2401.168256] name failslab, interval 1, probability 0, space 0, times 0 [ 2401.199407] CPU: 0 PID: 4718 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2401.207224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2401.207229] Call Trace: [ 2401.207243] dump_stack+0x1b2/0x281 [ 2401.207257] should_fail.cold+0x10a/0x149 [ 2401.222793] should_failslab+0xd6/0x130 [ 2401.222807] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2401.222819] __kmalloc_node+0x38/0x70 [ 2401.222831] blk_mq_alloc_rq_map+0xd2/0x220 [ 2401.222842] __blk_mq_alloc_rq_map+0xa3/0x3a0 [ 2401.236027] blk_mq_alloc_tag_set+0x4ac/0x910 [ 2401.236043] loop_add+0x2a0/0x830 [ 2401.236054] ? loop_queue_rq+0x280/0x280 [ 2401.236063] ? trace_hardirqs_on+0x10/0x10 [ 2401.236076] loop_control_ioctl+0x161/0x3f0 [ 2401.244165] ? loop_lookup+0x190/0x190 [ 2401.244175] ? SyS_write+0x1b7/0x210 [ 2401.244186] ? loop_lookup+0x190/0x190 [ 2401.244197] do_vfs_ioctl+0x75a/0xff0 [ 2401.244208] ? lock_acquire+0x170/0x3f0 [ 2401.253159] ? ioctl_preallocate+0x1a0/0x1a0 [ 2401.253172] ? __fget+0x265/0x3e0 [ 2401.253183] ? do_vfs_ioctl+0xff0/0xff0 [ 2401.253193] ? security_file_ioctl+0x83/0xb0 [ 2401.253203] SyS_ioctl+0x7f/0xb0 [ 2401.260679] ? do_vfs_ioctl+0xff0/0xff0 [ 2401.260691] do_syscall_64+0x1d5/0x640 17:10:16 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 9) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:16 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 17:10:16 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) 17:10:16 executing program 5: timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) 17:10:16 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) [ 2401.260704] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2401.260711] RIP: 0033:0x7ffa0bda9109 [ 2401.260718] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 [ 2401.269235] ORIG_RAX: 0000000000000010 [ 2401.269241] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2401.269247] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2401.269255] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2401.276814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 17:10:16 executing program 2: openat$random(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = socket(0x27, 0x80000, 0x6) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0xb, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008005) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x110}, 0x48085) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000003060102000000000000000000000002526642ebd4d646fdff450b183ffcd4e9b0096c8be0bf17e382392c686a07945841af3766950c0a809e924723a3f70f6505ed0bf2f6618736a8aa3f4895df581cdf351fcde30840c64022dcd4759d371766139e18ea3efe6d8c1a75a19ef78cc9c3deb4a277ef04543286e93d"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008810) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_bp={&(0x7f0000000240), 0x2}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x400000000000000, 0xffffffffffffffff, 0xa) 17:10:16 executing program 5: timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) [ 2401.276820] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 [ 2401.285608] blk-mq: reduced tag depth (128 -> 64) 17:10:16 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000000)=""/204) socket$bt_cmtp(0x1f, 0x3, 0x5) 17:10:16 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000a14e0aef3501650104000000006d00000000000000"], 0x14}}, 0x0) [ 2401.483019] FAULT_INJECTION: forcing a failure. [ 2401.483019] name failslab, interval 1, probability 0, space 0, times 0 [ 2401.514901] CPU: 0 PID: 4756 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2401.522810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2401.532209] Call Trace: [ 2401.534803] dump_stack+0x1b2/0x281 [ 2401.538457] should_fail.cold+0x10a/0x149 [ 2401.542612] should_failslab+0xd6/0x130 [ 2401.546593] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2401.551702] __kmalloc_node+0x38/0x70 [ 2401.555505] blk_mq_alloc_rq_map+0x113/0x220 [ 2401.559923] __blk_mq_alloc_rq_map+0xa3/0x3a0 [ 2401.564432] blk_mq_alloc_tag_set+0x4ac/0x910 [ 2401.568933] loop_add+0x2a0/0x830 [ 2401.568944] ? loop_queue_rq+0x280/0x280 [ 2401.568953] ? trace_hardirqs_on+0x10/0x10 17:10:16 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async, rerun: 64) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000000)=""/204) (async, rerun: 64) socket$bt_cmtp(0x1f, 0x3, 0x5) [ 2401.568965] loop_control_ioctl+0x161/0x3f0 [ 2401.568975] ? loop_lookup+0x190/0x190 [ 2401.580690] ? SyS_write+0x1b7/0x210 [ 2401.580705] ? loop_lookup+0x190/0x190 [ 2401.580715] do_vfs_ioctl+0x75a/0xff0 [ 2401.580728] ? lock_acquire+0x170/0x3f0 [ 2401.604423] ? ioctl_preallocate+0x1a0/0x1a0 [ 2401.608839] ? __fget+0x265/0x3e0 [ 2401.612297] ? do_vfs_ioctl+0xff0/0xff0 [ 2401.616278] ? security_file_ioctl+0x83/0xb0 [ 2401.620680] SyS_ioctl+0x7f/0xb0 [ 2401.620690] ? do_vfs_ioctl+0xff0/0xff0 [ 2401.620702] do_syscall_64+0x1d5/0x640 [ 2401.620717] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2401.628223] RIP: 0033:0x7ffa0bda9109 [ 2401.628230] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2401.628241] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2401.628247] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2401.628252] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2401.628260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 17:10:17 executing program 2: openat$random(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = socket(0x27, 0x80000, 0x6) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0xb, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008005) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x110}, 0x48085) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000003060102000000000000000000000002526642ebd4d646fdff450b183ffcd4e9b0096c8be0bf17e382392c686a07945841af3766950c0a809e924723a3f70f6505ed0bf2f6618736a8aa3f4895df581cdf351fcde30840c64022dcd4759d371766139e18ea3efe6d8c1a75a19ef78cc9c3deb4a277ef04543286e93d"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008810) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_bp={&(0x7f0000000240), 0x2}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x400000000000000, 0xffffffffffffffff, 0xa) openat$random(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) (async) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) socket(0x27, 0x80000, 0x6) (async) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0xb, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008005) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x110}, 0x48085) (async) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000003060102000000000000000000000002526642ebd4d646fdff450b183ffcd4e9b0096c8be0bf17e382392c686a07945841af3766950c0a809e924723a3f70f6505ed0bf2f6618736a8aa3f4895df581cdf351fcde30840c64022dcd4759d371766139e18ea3efe6d8c1a75a19ef78cc9c3deb4a277ef04543286e93d"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008810) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_bp={&(0x7f0000000240), 0x2}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x400000000000000, 0xffffffffffffffff, 0xa) (async) 17:10:17 executing program 5: timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) [ 2401.641010] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:17 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 10) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:17 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) 17:10:17 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000a14e0aef3501650104000000006d00000000000000"], 0x14}}, 0x0) 17:10:17 executing program 2: openat$random(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) (async) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = socket(0x27, 0x80000, 0x6) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0xb, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008005) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x110}, 0x48085) (async) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000003060102000000000000000000000002526642ebd4d646fdff450b183ffcd4e9b0096c8be0bf17e382392c686a07945841af3766950c0a809e924723a3f70f6505ed0bf2f6618736a8aa3f4895df581cdf351fcde30840c64022dcd4759d371766139e18ea3efe6d8c1a75a19ef78cc9c3deb4a277ef04543286e93d"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008810) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_bp={&(0x7f0000000240), 0x2}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x400000000000000, 0xffffffffffffffff, 0xa) 17:10:17 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x8001}, 0x8) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000180)={0x8, &(0x7f00000000c0)=[{@fixed}, {@none}, {}, {@none}, {@none}, {}, {@fixed}, {@fixed}]}) perf_event_open(&(0x7f0000000200)={0x1, 0xfffffffffffffef1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2401.720554] blk-mq: reduced tag depth (128 -> 64) 17:10:17 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000000)=""/204) (async) socket$bt_cmtp(0x1f, 0x3, 0x5) 17:10:17 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x8001}, 0x8) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000180)={0x8, &(0x7f00000000c0)=[{@fixed}, {@none}, {}, {@none}, {@none}, {}, {@fixed}, {@fixed}]}) perf_event_open(&(0x7f0000000200)={0x1, 0xfffffffffffffef1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x8001}, 0x8) (async) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000180)={0x8, &(0x7f00000000c0)=[{@fixed}, {@none}, {}, {@none}, {@none}, {}, {@fixed}, {@fixed}]}) (async) perf_event_open(&(0x7f0000000200)={0x1, 0xfffffffffffffef1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) 17:10:17 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:17 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) socket$can_raw(0x1d, 0x3, 0x1) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) (async) 17:10:17 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000a14e0aef3501650104000000006d00000000000000"], 0x14}}, 0x0) 17:10:17 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x800) socket$isdn_base(0x22, 0x3, 0x0) 17:10:17 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) [ 2401.869098] FAULT_INJECTION: forcing a failure. [ 2401.869098] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2401.909343] CPU: 1 PID: 4810 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2401.917165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2401.926513] Call Trace: [ 2401.926530] dump_stack+0x1b2/0x281 [ 2401.926543] should_fail.cold+0x10a/0x149 [ 2401.926557] __alloc_pages_nodemask+0x22c/0x2720 [ 2401.926566] ? kasan_kmalloc+0xeb/0x160 [ 2401.926576] ? blk_mq_alloc_rq_map+0x113/0x220 [ 2401.926583] ? __blk_mq_alloc_rq_map+0xa3/0x3a0 [ 2401.926591] ? loop_add+0x2a0/0x830 [ 2401.926598] ? loop_control_ioctl+0x161/0x3f0 [ 2401.926606] ? do_vfs_ioctl+0x75a/0xff0 [ 2401.926616] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2401.926627] ? __mutex_unlock_slowpath+0x75/0x770 [ 2401.926636] ? fs_reclaim_release+0xd0/0x110 [ 2401.926645] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2401.926659] ? __lockdep_init_map+0x100/0x560 [ 2401.926668] ? _find_next_bit+0xdb/0x100 [ 2401.926680] ? __cpu_to_node+0x7b/0xa0 [ 2401.937013] ? blk_mq_hw_queue_to_node+0x9f/0xf0 [ 2401.937027] blk_mq_alloc_rqs+0x227/0x6d0 [ 2401.937039] ? blk_mq_alloc_rq_map+0x9d/0x220 [ 2402.012095] __blk_mq_alloc_rq_map+0x15b/0x3a0 [ 2402.016663] blk_mq_alloc_tag_set+0x4ac/0x910 [ 2402.021144] loop_add+0x2a0/0x830 [ 2402.024586] ? loop_queue_rq+0x280/0x280 [ 2402.028633] ? trace_hardirqs_on+0x10/0x10 [ 2402.032856] loop_control_ioctl+0x161/0x3f0 [ 2402.037261] ? loop_lookup+0x190/0x190 [ 2402.041155] ? SyS_write+0x1b7/0x210 [ 2402.044945] ? loop_lookup+0x190/0x190 [ 2402.048812] do_vfs_ioctl+0x75a/0xff0 [ 2402.052600] ? lock_acquire+0x170/0x3f0 [ 2402.056560] ? ioctl_preallocate+0x1a0/0x1a0 [ 2402.060975] ? __fget+0x265/0x3e0 [ 2402.064416] ? do_vfs_ioctl+0xff0/0xff0 [ 2402.068376] ? security_file_ioctl+0x83/0xb0 [ 2402.072770] SyS_ioctl+0x7f/0xb0 [ 2402.076143] ? do_vfs_ioctl+0xff0/0xff0 [ 2402.080110] do_syscall_64+0x1d5/0x640 [ 2402.084002] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2402.089193] RIP: 0033:0x7ffa0bda9109 [ 2402.092888] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2402.100582] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 17:10:17 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 11) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:17 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x8001}, 0x8) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000180)={0x8, &(0x7f00000000c0)=[{@fixed}, {@none}, {}, {@none}, {@none}, {}, {@fixed}, {@fixed}]}) perf_event_open(&(0x7f0000000200)={0x1, 0xfffffffffffffef1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x8001}, 0x8) (async) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000180)={0x8, &(0x7f00000000c0)=[{@fixed}, {@none}, {}, {@none}, {@none}, {}, {@fixed}, {@fixed}]}) (async) perf_event_open(&(0x7f0000000200)={0x1, 0xfffffffffffffef1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) 17:10:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000a0a01040000000000000000e1ffffff"], 0x14}}, 0x0) 17:10:17 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x800) socket$isdn_base(0x22, 0x3, 0x0) 17:10:17 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:17 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x7ff, 0xffffffff, 0xe0f, 0x1, 0xc8, 0x3aa}) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) [ 2402.107842] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2402.115188] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2402.122449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2402.129703] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:17 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x7ff, 0xffffffff, 0xe0f, 0x1, 0xc8, 0x3aa}) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) (async) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x7ff, 0xffffffff, 0xe0f, 0x1, 0xc8, 0x3aa}) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) (async) 17:10:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000a0a01040000000000000000e1ffffff"], 0x14}}, 0x0) 17:10:17 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x800) (async) socket$isdn_base(0x22, 0x3, 0x0) 17:10:17 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() ioprio_get$pid(0x2, r0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6c, 0x8, 0xc0, 0xfa, 0x0, 0x4, 0x11, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x400, 0xc25b, 0x2, 0x3, 0x9, 0x7, 0x5, 0x0, 0x7f800, 0x0, 0x5ff}, r0, 0x9, 0xffffffffffffffff, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000140)=0x3, 0x4) 17:10:17 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:17 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x7ff, 0xffffffff, 0xe0f, 0x1, 0xc8, 0x3aa}) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) (async) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x7ff, 0xffffffff, 0xe0f, 0x1, 0xc8, 0x3aa}) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) (async) [ 2402.286575] FAULT_INJECTION: forcing a failure. [ 2402.286575] name failslab, interval 1, probability 0, space 0, times 0 [ 2402.309223] CPU: 0 PID: 4861 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2402.317486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2402.330324] Call Trace: [ 2402.332918] dump_stack+0x1b2/0x281 [ 2402.336556] should_fail.cold+0x10a/0x149 [ 2402.340703] should_failslab+0xd6/0x130 [ 2402.344666] kmem_cache_alloc_node+0x263/0x410 [ 2402.349249] blk_alloc_queue_node+0x2d/0xb40 [ 2402.353641] blk_mq_init_queue+0x42/0x90 [ 2402.357703] loop_add+0x303/0x830 [ 2402.361141] ? loop_queue_rq+0x280/0x280 [ 2402.365194] ? trace_hardirqs_on+0x10/0x10 [ 2402.369411] loop_control_ioctl+0x161/0x3f0 [ 2402.373710] ? loop_lookup+0x190/0x190 [ 2402.377677] ? SyS_write+0x1b7/0x210 [ 2402.381370] ? loop_lookup+0x190/0x190 [ 2402.385241] do_vfs_ioctl+0x75a/0xff0 [ 2402.389031] ? lock_acquire+0x170/0x3f0 [ 2402.393000] ? ioctl_preallocate+0x1a0/0x1a0 [ 2402.397391] ? __fget+0x265/0x3e0 [ 2402.400838] ? do_vfs_ioctl+0xff0/0xff0 [ 2402.404878] ? security_file_ioctl+0x83/0xb0 [ 2402.409265] SyS_ioctl+0x7f/0xb0 [ 2402.412608] ? do_vfs_ioctl+0xff0/0xff0 [ 2402.416563] do_syscall_64+0x1d5/0x640 [ 2402.420447] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2402.425613] RIP: 0033:0x7ffa0bda9109 [ 2402.429298] RSP: 002b:00007ffa0a6fd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:10:17 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 12) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:17 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) 17:10:17 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() ioprio_get$pid(0x2, r0) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6c, 0x8, 0xc0, 0xfa, 0x0, 0x4, 0x11, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x400, 0xc25b, 0x2, 0x3, 0x9, 0x7, 0x5, 0x0, 0x7f800, 0x0, 0x5ff}, r0, 0x9, 0xffffffffffffffff, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000140)=0x3, 0x4) 17:10:17 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) 17:10:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000a0a01040000000000000000e1ffffff"], 0x14}}, 0x0) 17:10:17 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='\x00') (async, rerun: 32) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 32) [ 2402.437073] RAX: ffffffffffffffda RBX: 00007ffa0bebc030 RCX: 00007ffa0bda9109 [ 2402.444332] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2402.451632] RBP: 00007ffa0a6fd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2402.458880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2402.466126] R13: 00007ffe4a30229f R14: 00007ffa0a6fd300 R15: 0000000000022000 17:10:17 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) 17:10:17 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) 17:10:17 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='\x00') (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000001c0), 0x2, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0xb, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0xa, 0x1, '{\x88)#\\\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) 17:10:17 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = gettid() ioprio_get$pid(0x2, r0) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6c, 0x8, 0xc0, 0xfa, 0x0, 0x4, 0x11, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x400, 0xc25b, 0x2, 0x3, 0x9, 0x7, 0x5, 0x0, 0x7f800, 0x0, 0x5ff}, r0, 0x9, 0xffffffffffffffff, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async, rerun: 32) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000140)=0x3, 0x4) (rerun: 32) 17:10:17 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) [ 2402.580220] FAULT_INJECTION: forcing a failure. [ 2402.580220] name failslab, interval 1, probability 0, space 0, times 0 [ 2402.595886] CPU: 0 PID: 4890 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2402.603798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2402.613181] Call Trace: [ 2402.615797] dump_stack+0x1b2/0x281 [ 2402.619441] should_fail.cold+0x10a/0x149 [ 2402.623591] should_failslab+0xd6/0x130 [ 2402.627571] kmem_cache_alloc_trace+0x29a/0x3d0 [ 2402.632241] bioset_create+0x53/0x750 [ 2402.636055] ? kmem_cache_alloc_node+0x38b/0x410 [ 2402.640813] blk_alloc_queue_node+0xa8/0xb40 [ 2402.645225] blk_mq_init_queue+0x42/0x90 [ 2402.649293] loop_add+0x303/0x830 [ 2402.652756] ? loop_queue_rq+0x280/0x280 [ 2402.656820] ? trace_hardirqs_on+0x10/0x10 [ 2402.661057] loop_control_ioctl+0x161/0x3f0 [ 2402.665377] ? loop_lookup+0x190/0x190 [ 2402.669263] ? SyS_write+0x1b7/0x210 [ 2402.672977] ? loop_lookup+0x190/0x190 [ 2402.676865] do_vfs_ioctl+0x75a/0xff0 [ 2402.680666] ? lock_acquire+0x170/0x3f0 [ 2402.684652] ? ioctl_preallocate+0x1a0/0x1a0 [ 2402.689058] ? __fget+0x265/0x3e0 [ 2402.692510] ? do_vfs_ioctl+0xff0/0xff0 [ 2402.696485] ? security_file_ioctl+0x83/0xb0 [ 2402.700948] SyS_ioctl+0x7f/0xb0 [ 2402.704300] ? do_vfs_ioctl+0xff0/0xff0 [ 2402.708259] do_syscall_64+0x1d5/0x640 [ 2402.712139] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2402.717313] RIP: 0033:0x7ffa0bda9109 [ 2402.721002] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:10:18 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 13) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:18 executing program 1: r0 = semget$private(0x0, 0x2, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x2, 0x40, 0x800}, {0x2, 0x5}, {0x2, 0xfffa, 0x1800}, {0x3, 0x3, 0x1800}, {0x1, 0x3}], 0x5, &(0x7f0000000040)) r1 = semget$private(0x0, 0x1, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x9]) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000140)={{0x3, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee00, 0xd, 0x800}, 0x62, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}) r2 = socket$can_raw(0x1d, 0x3, 0x1) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/126) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000080)=0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0x21) 17:10:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x1, 0x0, 0x0, 0x7, 0x84a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0xebb, 0x10000) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000140)=""/206) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f0000000080)) 17:10:18 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000001c0), 0x2, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0xb, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0xa, 0x1, '{\x88)#\\\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000001c0), 0x2, 0x0) (async) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0xb, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0xa, 0x1, '{\x88)#\\\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) 17:10:18 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) [ 2402.728774] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2402.736030] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2402.743276] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2402.750667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2402.757933] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x1, 0x0, 0x0, 0x7, 0x84a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) (async) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0xebb, 0x10000) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000140)=""/206) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f0000000080)) 17:10:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000001c0), 0x2, 0x0) (async) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0xb, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0xa, 0x1, '{\x88)#\\\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) 17:10:18 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10401, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x71d000, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) ioctl$IMSETDEVNAME(r4, 0x80184947, &(0x7f0000000040)={0x40, 'syz0\x00'}) socket$isdn_base(0x22, 0x3, 0x0) [ 2402.815650] FAULT_INJECTION: forcing a failure. [ 2402.815650] name failslab, interval 1, probability 0, space 0, times 0 [ 2402.844891] CPU: 1 PID: 4921 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2402.852713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2402.862064] Call Trace: 17:10:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x1, 0x0, 0x0, 0x7, 0x84a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0xebb, 0x10000) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000140)=""/206) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x1, 0x0, 0x0, 0x7, 0x84a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000100), 0xebb, 0x10000) (async) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000140)=""/206) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f0000000080)) (async) 17:10:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x2, 0xff, 0x0, 0x4, 0x0, 0x10000, 0x30000, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x8, 0x8, 0xe72f, 0x8, 0x1, 0x0, 0x5b6, 0x0, 0x4, 0x0, 0x80000000}, 0xffffffffffffffff, 0x3, r0, 0x3) 17:10:18 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/139) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = getuid() sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2fc, 0xa, 0x5, 0x401, 0x0, 0x0, {0x1}, [@typed={0x8, 0x55, 0x0, 0x0, @uid=r2}, @generic="a54c2903fd6855b80f4ac875b3bdf92bbce74ec19b6e021ccd62a169dd6dc8abb8d93a70692ed09d9d037ac8f16d11bce37a601362edfe4f1a7df2cb78ddf6614e8d15b7315f9bb8bbe0783582c31bd52d189977c1119f2045b8a350fa539f642c54dc0783bc4feebc6bfa5013d45e5a0e839993a369c672dd508f606d0163f87e18db9e47ceee49613b", @nested={0x4, 0x84}, @typed={0x8, 0x2c, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="d535bad26d48ea751a280b8b8f3e0babe7ee20f5ad8b41e1e8bdb6442cc50be25d6fb14c3c4d2800148fda0e4ad6b42f1e5c83f2e6b1b014b8f61712e7c59be7de7b6d934a13f9d3f005e399c2b0c5898b5d7713c21e25f75986805f8d8f27297c17598423d66c338d", @nested={0x1dd, 0x50, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x3d}, @generic="a93903c760f3702a4a07b704eaafa51f6fcb413a87075ef26d216b09c532549d80065fe8faee1384782385fbdd0ce20c5e587dca07f52db2a9", @typed={0x14, 0x56, 0x0, 0x0, @ipv6=@mcast2}, @generic="bb2f19bab52f4666e84650993771032ffbb9fd9bc0a36b0d5f8b7f070bc8ba70c76a5f73e452990e6b9c2c8276cabea5c8fc60a1844742e9615edd2cba9d061eb3ba793a177bde39d54a9e4ff7e8af2dd7decb265e6177f62e20bd591870c749", @generic="5842bb9197f31e70be7c6f", @generic="019566990778a0d53e17e079b2708793c673720045bdd691c944bf4ac325602de6d5385c9a887b136831c78adfa7dd8bcdce11ed9b9910842bc07a7dd0302874ce27b6334db94b7c9c83b43df81871587fc32c69f0b0e1c5cd833168237d4855367455f24873c9aa903f16a8bbe2d42902f0ee3cec42a1ceeb16bc7626e101f3c388c4bb47cec1ac9ba493312c719cb84cb84fbdea", @typed={0x8, 0x59, 0x0, 0x0, @u32=0x6}, @generic="c583ff0c7aafa785f3178e2bb3591a2d1ffeacc5c0ae19b5c467ce8bc8c1591ccabb8be8ed711ad27927576e251edae65327d0bb7c49fd742016b3f752f31a2507c494ff8a54109db9e2958dad0747f37936787791a93a01b49a18c21587594415d5edd8676f9319c2fed6cb206b74c08b4b583feb0542af"]}]}, 0x2fc}}, 0x0) [ 2402.864654] dump_stack+0x1b2/0x281 [ 2402.868288] should_fail.cold+0x10a/0x149 [ 2402.872528] should_failslab+0xd6/0x130 [ 2402.876508] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2402.881612] ? mempool_free+0x1d0/0x1d0 [ 2402.885593] mempool_create_node+0x76/0x3e0 [ 2402.889916] ? mempool_kmalloc+0x20/0x20 [ 2402.893986] bioset_create+0x31b/0x750 [ 2402.897876] ? kmem_cache_alloc_node+0x38b/0x410 [ 2402.902650] blk_alloc_queue_node+0xa8/0xb40 [ 2402.907065] blk_mq_init_queue+0x42/0x90 [ 2402.911129] loop_add+0x303/0x830 [ 2402.914587] ? loop_queue_rq+0x280/0x280 [ 2402.918676] ? trace_hardirqs_on+0x10/0x10 [ 2402.922922] loop_control_ioctl+0x161/0x3f0 [ 2402.927245] ? loop_lookup+0x190/0x190 [ 2402.931136] ? SyS_write+0x1b7/0x210 [ 2402.934851] ? loop_lookup+0x190/0x190 [ 2402.934862] do_vfs_ioctl+0x75a/0xff0 [ 2402.934872] ? lock_acquire+0x170/0x3f0 [ 2402.934880] ? ioctl_preallocate+0x1a0/0x1a0 [ 2402.934892] ? __fget+0x265/0x3e0 [ 2402.934903] ? do_vfs_ioctl+0xff0/0xff0 [ 2402.934914] ? security_file_ioctl+0x83/0xb0 17:10:18 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 14) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:18 executing program 1: r0 = semget$private(0x0, 0x2, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x2, 0x40, 0x800}, {0x2, 0x5}, {0x2, 0xfffa, 0x1800}, {0x3, 0x3, 0x1800}, {0x1, 0x3}], 0x5, &(0x7f0000000040)) (async) r1 = semget$private(0x0, 0x1, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x9]) (async) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000140)={{0x3, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee00, 0xd, 0x800}, 0x62, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) (async) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/126) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000080)=0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0x21) 17:10:18 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async, rerun: 64) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/139) (rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = getuid() sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2fc, 0xa, 0x5, 0x401, 0x0, 0x0, {0x1}, [@typed={0x8, 0x55, 0x0, 0x0, @uid=r2}, @generic="a54c2903fd6855b80f4ac875b3bdf92bbce74ec19b6e021ccd62a169dd6dc8abb8d93a70692ed09d9d037ac8f16d11bce37a601362edfe4f1a7df2cb78ddf6614e8d15b7315f9bb8bbe0783582c31bd52d189977c1119f2045b8a350fa539f642c54dc0783bc4feebc6bfa5013d45e5a0e839993a369c672dd508f606d0163f87e18db9e47ceee49613b", @nested={0x4, 0x84}, @typed={0x8, 0x2c, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="d535bad26d48ea751a280b8b8f3e0babe7ee20f5ad8b41e1e8bdb6442cc50be25d6fb14c3c4d2800148fda0e4ad6b42f1e5c83f2e6b1b014b8f61712e7c59be7de7b6d934a13f9d3f005e399c2b0c5898b5d7713c21e25f75986805f8d8f27297c17598423d66c338d", @nested={0x1dd, 0x50, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x3d}, @generic="a93903c760f3702a4a07b704eaafa51f6fcb413a87075ef26d216b09c532549d80065fe8faee1384782385fbdd0ce20c5e587dca07f52db2a9", @typed={0x14, 0x56, 0x0, 0x0, @ipv6=@mcast2}, @generic="bb2f19bab52f4666e84650993771032ffbb9fd9bc0a36b0d5f8b7f070bc8ba70c76a5f73e452990e6b9c2c8276cabea5c8fc60a1844742e9615edd2cba9d061eb3ba793a177bde39d54a9e4ff7e8af2dd7decb265e6177f62e20bd591870c749", @generic="5842bb9197f31e70be7c6f", @generic="019566990778a0d53e17e079b2708793c673720045bdd691c944bf4ac325602de6d5385c9a887b136831c78adfa7dd8bcdce11ed9b9910842bc07a7dd0302874ce27b6334db94b7c9c83b43df81871587fc32c69f0b0e1c5cd833168237d4855367455f24873c9aa903f16a8bbe2d42902f0ee3cec42a1ceeb16bc7626e101f3c388c4bb47cec1ac9ba493312c719cb84cb84fbdea", @typed={0x8, 0x59, 0x0, 0x0, @u32=0x6}, @generic="c583ff0c7aafa785f3178e2bb3591a2d1ffeacc5c0ae19b5c467ce8bc8c1591ccabb8be8ed711ad27927576e251edae65327d0bb7c49fd742016b3f752f31a2507c494ff8a54109db9e2958dad0747f37936787791a93a01b49a18c21587594415d5edd8676f9319c2fed6cb206b74c08b4b583feb0542af"]}]}, 0x2fc}}, 0x0) 17:10:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x2, 0xff, 0x0, 0x4, 0x0, 0x10000, 0x30000, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x8, 0x8, 0xe72f, 0x8, 0x1, 0x0, 0x5b6, 0x0, 0x4, 0x0, 0x80000000}, 0xffffffffffffffff, 0x3, r0, 0x3) 17:10:18 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) [ 2402.934923] SyS_ioctl+0x7f/0xb0 [ 2402.934930] ? do_vfs_ioctl+0xff0/0xff0 [ 2402.934939] do_syscall_64+0x1d5/0x640 [ 2402.934954] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2402.934962] RIP: 0033:0x7ffa0bda9109 [ 2402.934967] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2402.934977] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2402.934982] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2402.934988] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 17:10:18 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/139) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = getuid() sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2fc, 0xa, 0x5, 0x401, 0x0, 0x0, {0x1}, [@typed={0x8, 0x55, 0x0, 0x0, @uid=r2}, @generic="a54c2903fd6855b80f4ac875b3bdf92bbce74ec19b6e021ccd62a169dd6dc8abb8d93a70692ed09d9d037ac8f16d11bce37a601362edfe4f1a7df2cb78ddf6614e8d15b7315f9bb8bbe0783582c31bd52d189977c1119f2045b8a350fa539f642c54dc0783bc4feebc6bfa5013d45e5a0e839993a369c672dd508f606d0163f87e18db9e47ceee49613b", @nested={0x4, 0x84}, @typed={0x8, 0x2c, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="d535bad26d48ea751a280b8b8f3e0babe7ee20f5ad8b41e1e8bdb6442cc50be25d6fb14c3c4d2800148fda0e4ad6b42f1e5c83f2e6b1b014b8f61712e7c59be7de7b6d934a13f9d3f005e399c2b0c5898b5d7713c21e25f75986805f8d8f27297c17598423d66c338d", @nested={0x1dd, 0x50, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x3d}, @generic="a93903c760f3702a4a07b704eaafa51f6fcb413a87075ef26d216b09c532549d80065fe8faee1384782385fbdd0ce20c5e587dca07f52db2a9", @typed={0x14, 0x56, 0x0, 0x0, @ipv6=@mcast2}, @generic="bb2f19bab52f4666e84650993771032ffbb9fd9bc0a36b0d5f8b7f070bc8ba70c76a5f73e452990e6b9c2c8276cabea5c8fc60a1844742e9615edd2cba9d061eb3ba793a177bde39d54a9e4ff7e8af2dd7decb265e6177f62e20bd591870c749", @generic="5842bb9197f31e70be7c6f", @generic="019566990778a0d53e17e079b2708793c673720045bdd691c944bf4ac325602de6d5385c9a887b136831c78adfa7dd8bcdce11ed9b9910842bc07a7dd0302874ce27b6334db94b7c9c83b43df81871587fc32c69f0b0e1c5cd833168237d4855367455f24873c9aa903f16a8bbe2d42902f0ee3cec42a1ceeb16bc7626e101f3c388c4bb47cec1ac9ba493312c719cb84cb84fbdea", @typed={0x8, 0x59, 0x0, 0x0, @u32=0x6}, @generic="c583ff0c7aafa785f3178e2bb3591a2d1ffeacc5c0ae19b5c467ce8bc8c1591ccabb8be8ed711ad27927576e251edae65327d0bb7c49fd742016b3f752f31a2507c494ff8a54109db9e2958dad0747f37936787791a93a01b49a18c21587594415d5edd8676f9319c2fed6cb206b74c08b4b583feb0542af"]}]}, 0x2fc}}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/139) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) getuid() (async) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2fc, 0xa, 0x5, 0x401, 0x0, 0x0, {0x1}, [@typed={0x8, 0x55, 0x0, 0x0, @uid=r2}, @generic="a54c2903fd6855b80f4ac875b3bdf92bbce74ec19b6e021ccd62a169dd6dc8abb8d93a70692ed09d9d037ac8f16d11bce37a601362edfe4f1a7df2cb78ddf6614e8d15b7315f9bb8bbe0783582c31bd52d189977c1119f2045b8a350fa539f642c54dc0783bc4feebc6bfa5013d45e5a0e839993a369c672dd508f606d0163f87e18db9e47ceee49613b", @nested={0x4, 0x84}, @typed={0x8, 0x2c, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="d535bad26d48ea751a280b8b8f3e0babe7ee20f5ad8b41e1e8bdb6442cc50be25d6fb14c3c4d2800148fda0e4ad6b42f1e5c83f2e6b1b014b8f61712e7c59be7de7b6d934a13f9d3f005e399c2b0c5898b5d7713c21e25f75986805f8d8f27297c17598423d66c338d", @nested={0x1dd, 0x50, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x3d}, @generic="a93903c760f3702a4a07b704eaafa51f6fcb413a87075ef26d216b09c532549d80065fe8faee1384782385fbdd0ce20c5e587dca07f52db2a9", @typed={0x14, 0x56, 0x0, 0x0, @ipv6=@mcast2}, @generic="bb2f19bab52f4666e84650993771032ffbb9fd9bc0a36b0d5f8b7f070bc8ba70c76a5f73e452990e6b9c2c8276cabea5c8fc60a1844742e9615edd2cba9d061eb3ba793a177bde39d54a9e4ff7e8af2dd7decb265e6177f62e20bd591870c749", @generic="5842bb9197f31e70be7c6f", @generic="019566990778a0d53e17e079b2708793c673720045bdd691c944bf4ac325602de6d5385c9a887b136831c78adfa7dd8bcdce11ed9b9910842bc07a7dd0302874ce27b6334db94b7c9c83b43df81871587fc32c69f0b0e1c5cd833168237d4855367455f24873c9aa903f16a8bbe2d42902f0ee3cec42a1ceeb16bc7626e101f3c388c4bb47cec1ac9ba493312c719cb84cb84fbdea", @typed={0x8, 0x59, 0x0, 0x0, @u32=0x6}, @generic="c583ff0c7aafa785f3178e2bb3591a2d1ffeacc5c0ae19b5c467ce8bc8c1591ccabb8be8ed711ad27927576e251edae65327d0bb7c49fd742016b3f752f31a2507c494ff8a54109db9e2958dad0747f37936787791a93a01b49a18c21587594415d5edd8676f9319c2fed6cb206b74c08b4b583feb0542af"]}]}, 0x2fc}}, 0x0) (async) 17:10:18 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10401, 0x0) (async, rerun: 64) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x71d000, 0x0) (rerun: 64) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) (async, rerun: 32) ioctl$IMSETDEVNAME(r4, 0x80184947, &(0x7f0000000040)={0x40, 'syz0\x00'}) (async, rerun: 32) socket$isdn_base(0x22, 0x3, 0x0) 17:10:18 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x2, 0xff, 0x0, 0x4, 0x0, 0x10000, 0x30000, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x8, 0x8, 0xe72f, 0x8, 0x1, 0x0, 0x5b6, 0x0, 0x4, 0x0, 0x80000000}, 0xffffffffffffffff, 0x3, r0, 0x3) [ 2402.934993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2402.934998] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 [ 2402.998597] FAULT_INJECTION: forcing a failure. [ 2402.998597] name failslab, interval 1, probability 0, space 0, times 0 [ 2403.054083] CPU: 1 PID: 4955 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 17:10:18 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10401, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x71d000, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000100)) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) (async) ioctl$IMSETDEVNAME(r4, 0x80184947, &(0x7f0000000040)={0x40, 'syz0\x00'}) (async) socket$isdn_base(0x22, 0x3, 0x0) 17:10:18 executing program 0: io_setup(0x7, &(0x7f0000000000)=0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}]}, 0x58}}, 0x0) io_setup(0x0, &(0x7f00000004c0)) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb4, 0x4, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfdb}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) r2 = semget$private(0x0, 0x1, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0x9]) semctl$IPC_RMID(r2, 0x0, 0x0) io_cancel(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0xffff, 0xffffffffffffffff, &(0x7f0000000280)="15464ad7066ab78728ea3af091e47c410f3ba9fa22b24788dc8aebd2f39fb94a036312ed311e2b955f5067e0ba82ad33b1507e9b3332c075ba3b4cca2dfe25ea2f07d1eabb44f5e68ee1f6a16443b491a79299d057ac468061", 0x59, 0x1000, 0x0, 0x2}, &(0x7f0000000340)) io_cancel(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x3f, 0xffffffffffffffff, &(0x7f0000000380)="5623b1d470717dd46509ba052968111e5b2ed3bca70617f3ff99725528c9347cbdff1c57a5dc09c7c624a653045fc565ae76a90964cd58cd5b49a7cfbcc1ca02b2516700de30704147c2f03ef4ddb3a45b6520837ff812d47044e1f7c57036686fb19a007004400ed726461c6bb71fa510c92c5ff961d70a576dc8ea6d9280cf49259f71792cc51eedbfc3c15e2e6c4c98b85ad9712aa6990639073f937715335e37fa1d31745359f69aeb7fbed28ab7b7326f566f8bee9d7b1ab09218cf35", 0xbf, 0x6, 0x0, 0x2}, &(0x7f0000000480)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="940000000a0601020000000000000000010000000520010007000000080009400000000105000100070000000500010007000000080009400000007450000880180007801400170070696d367265670000000000000000000c000780060005404e2100000c000780060005404e2100001c0007801800028014000240fc0200000000000000000000000000010800094000000000"], 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$nl_netfilter(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a0a0104000000000000000001000000404b662047980f925b78e250abd0b87732a6e0f56736493e771c6abdab3db525b1e7c5d18142eb373390f5e4f747bc56a72b234d39f57a65a351d2ccfbf9"], 0x14}}, 0x0) [ 2403.061905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2403.071343] Call Trace: [ 2403.073937] dump_stack+0x1b2/0x281 [ 2403.077565] should_fail.cold+0x10a/0x149 [ 2403.081727] should_failslab+0xd6/0x130 [ 2403.085723] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2403.090830] ? mempool_free+0x1d0/0x1d0 [ 2403.094816] __kmalloc_node+0x38/0x70 [ 2403.098626] mempool_create_node+0xb1/0x3e0 [ 2403.102949] ? mempool_kmalloc+0x20/0x20 [ 2403.107015] bioset_create+0x31b/0x750 17:10:18 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) [ 2403.107473] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2403.110899] ? kmem_cache_alloc_node+0x38b/0x410 [ 2403.110915] blk_alloc_queue_node+0xa8/0xb40 [ 2403.110929] blk_mq_init_queue+0x42/0x90 [ 2403.110942] loop_add+0x303/0x830 [ 2403.136349] ? loop_queue_rq+0x280/0x280 [ 2403.140413] ? trace_hardirqs_on+0x10/0x10 [ 2403.144661] loop_control_ioctl+0x161/0x3f0 [ 2403.148984] ? loop_lookup+0x190/0x190 [ 2403.152875] ? SyS_write+0x1b7/0x210 [ 2403.156594] ? loop_lookup+0x190/0x190 [ 2403.160480] do_vfs_ioctl+0x75a/0xff0 [ 2403.164279] ? lock_acquire+0x170/0x3f0 [ 2403.168248] ? ioctl_preallocate+0x1a0/0x1a0 [ 2403.168263] ? __fget+0x265/0x3e0 [ 2403.168276] ? do_vfs_ioctl+0xff0/0xff0 [ 2403.168291] ? security_file_ioctl+0x83/0xb0 [ 2403.176113] SyS_ioctl+0x7f/0xb0 [ 2403.176122] ? do_vfs_ioctl+0xff0/0xff0 [ 2403.176134] do_syscall_64+0x1d5/0x640 [ 2403.176153] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2403.200938] RIP: 0033:0x7ffa0bda9109 [ 2403.204636] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:10:18 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 15) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:18 executing program 1: r0 = semget$private(0x0, 0x2, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x2, 0x40, 0x800}, {0x2, 0x5}, {0x2, 0xfffa, 0x1800}, {0x3, 0x3, 0x1800}, {0x1, 0x3}], 0x5, &(0x7f0000000040)) r1 = semget$private(0x0, 0x1, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x9]) (async) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000140)={{0x3, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee00, 0xd, 0x800}, 0x62, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) (async) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/126) (async) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000080)=0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0x21) 17:10:18 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) socket$isdn_base(0x22, 0x3, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) (async) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) (async) 17:10:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x80401, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000140)={'\x00', 0x9, 0x2, 0x3}) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=0x30) 17:10:18 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x1) 17:10:18 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x1) 17:10:18 executing program 0: io_setup(0x7, &(0x7f0000000000)=0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}]}, 0x58}}, 0x0) io_setup(0x0, &(0x7f00000004c0)) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb4, 0x4, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfdb}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) r2 = semget$private(0x0, 0x1, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0x9]) semctl$IPC_RMID(r2, 0x0, 0x0) io_cancel(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0xffff, 0xffffffffffffffff, &(0x7f0000000280)="15464ad7066ab78728ea3af091e47c410f3ba9fa22b24788dc8aebd2f39fb94a036312ed311e2b955f5067e0ba82ad33b1507e9b3332c075ba3b4cca2dfe25ea2f07d1eabb44f5e68ee1f6a16443b491a79299d057ac468061", 0x59, 0x1000, 0x0, 0x2}, &(0x7f0000000340)) io_cancel(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x3f, 0xffffffffffffffff, &(0x7f0000000380)="5623b1d470717dd46509ba052968111e5b2ed3bca70617f3ff99725528c9347cbdff1c57a5dc09c7c624a653045fc565ae76a90964cd58cd5b49a7cfbcc1ca02b2516700de30704147c2f03ef4ddb3a45b6520837ff812d47044e1f7c57036686fb19a007004400ed726461c6bb71fa510c92c5ff961d70a576dc8ea6d9280cf49259f71792cc51eedbfc3c15e2e6c4c98b85ad9712aa6990639073f937715335e37fa1d31745359f69aeb7fbed28ab7b7326f566f8bee9d7b1ab09218cf35", 0xbf, 0x6, 0x0, 0x2}, &(0x7f0000000480)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="940000000a0601020000000000000000010000000520010007000000080009400000000105000100070000000500010007000000080009400000007450000880180007801400170070696d367265670000000000000000000c000780060005404e2100000c000780060005404e2100001c0007801800028014000240fc0200000000000000000000000000010800094000000000"], 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$nl_netfilter(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a0a0104000000000000000001000000404b662047980f925b78e250abd0b87732a6e0f56736493e771c6abdab3db525b1e7c5d18142eb373390f5e4f747bc56a72b234d39f57a65a351d2ccfbf9"], 0x14}}, 0x0) io_setup(0x7, &(0x7f0000000000)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}]}, 0x58}}, 0x0) (async) io_setup(0x0, &(0x7f00000004c0)) (async) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb4, 0x4, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfdb}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) (async) semget$private(0x0, 0x1, 0x0) (async) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0x9]) (async) semctl$IPC_RMID(r2, 0x0, 0x0) (async) io_cancel(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0xffff, 0xffffffffffffffff, &(0x7f0000000280)="15464ad7066ab78728ea3af091e47c410f3ba9fa22b24788dc8aebd2f39fb94a036312ed311e2b955f5067e0ba82ad33b1507e9b3332c075ba3b4cca2dfe25ea2f07d1eabb44f5e68ee1f6a16443b491a79299d057ac468061", 0x59, 0x1000, 0x0, 0x2}, &(0x7f0000000340)) (async) io_cancel(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x3f, 0xffffffffffffffff, &(0x7f0000000380)="5623b1d470717dd46509ba052968111e5b2ed3bca70617f3ff99725528c9347cbdff1c57a5dc09c7c624a653045fc565ae76a90964cd58cd5b49a7cfbcc1ca02b2516700de30704147c2f03ef4ddb3a45b6520837ff812d47044e1f7c57036686fb19a007004400ed726461c6bb71fa510c92c5ff961d70a576dc8ea6d9280cf49259f71792cc51eedbfc3c15e2e6c4c98b85ad9712aa6990639073f937715335e37fa1d31745359f69aeb7fbed28ab7b7326f566f8bee9d7b1ab09218cf35", 0xbf, 0x6, 0x0, 0x2}, &(0x7f0000000480)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="940000000a0601020000000000000000010000000520010007000000080009400000000105000100070000000500010007000000080009400000007450000880180007801400170070696d367265670000000000000000000c000780060005404e2100000c000780060005404e2100001c0007801800028014000240fc0200000000000000000000000000010800094000000000"], 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) sendmsg$nl_netfilter(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a0a0104000000000000000001000000404b662047980f925b78e250abd0b87732a6e0f56736493e771c6abdab3db525b1e7c5d18142eb373390f5e4f747bc56a72b234d39f57a65a351d2ccfbf9"], 0x14}}, 0x0) (async) [ 2403.212333] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2403.219593] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2403.226935] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2403.234190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2403.241553] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x80401, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000140)={'\x00', 0x9, 0x2, 0x3}) (async) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=0x30) 17:10:18 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x4, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x8) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000080), 0x4) 17:10:18 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) socket$isdn_base(0x22, 0x3, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) (async) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) (async) 17:10:18 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x1) 17:10:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x80401, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000140)={'\x00', 0x9, 0x2, 0x3}) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=0x30) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x80401, 0x0) (async) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000140)={'\x00', 0x9, 0x2, 0x3}) (async) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=0x30) (async) [ 2403.304946] FAULT_INJECTION: forcing a failure. [ 2403.304946] name failslab, interval 1, probability 0, space 0, times 0 [ 2403.325887] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2403.341786] CPU: 0 PID: 5002 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2403.349597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2403.349602] Call Trace: [ 2403.349619] dump_stack+0x1b2/0x281 [ 2403.349635] should_fail.cold+0x10a/0x149 [ 2403.349651] should_failslab+0xd6/0x130 [ 2403.369345] kmem_cache_alloc+0x28e/0x3c0 [ 2403.369356] ? mempool_free+0x1d0/0x1d0 [ 2403.369369] mempool_create_node+0x2d2/0x3e0 [ 2403.369384] bioset_create+0x31b/0x750 [ 2403.377582] ? kmem_cache_alloc_node+0x38b/0x410 [ 2403.377597] blk_alloc_queue_node+0xa8/0xb40 [ 2403.377612] blk_mq_init_queue+0x42/0x90 [ 2403.377626] loop_add+0x303/0x830 [ 2403.377637] ? loop_queue_rq+0x280/0x280 [ 2403.385987] ? trace_hardirqs_on+0x10/0x10 [ 2403.386000] loop_control_ioctl+0x161/0x3f0 [ 2403.386009] ? loop_lookup+0x190/0x190 [ 2403.386017] ? SyS_write+0x1b7/0x210 [ 2403.386028] ? loop_lookup+0x190/0x190 [ 2403.386039] do_vfs_ioctl+0x75a/0xff0 [ 2403.386049] ? lock_acquire+0x170/0x3f0 [ 2403.386060] ? ioctl_preallocate+0x1a0/0x1a0 [ 2403.386073] ? __fget+0x265/0x3e0 [ 2403.446178] ? do_vfs_ioctl+0xff0/0xff0 [ 2403.450129] ? security_file_ioctl+0x83/0xb0 [ 2403.454516] SyS_ioctl+0x7f/0xb0 [ 2403.457857] ? do_vfs_ioctl+0xff0/0xff0 [ 2403.461813] do_syscall_64+0x1d5/0x640 [ 2403.465683] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2403.470850] RIP: 0033:0x7ffa0bda9109 [ 2403.474541] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2403.482245] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2403.489698] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2403.497053] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 17:10:18 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 16) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:18 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x4, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x8) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000080), 0x4) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x4, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x8) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000080), 0x4) (async) 17:10:18 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x1, 0x10000) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000140)=""/4096) r1 = socket(0x2a, 0x5, 0x76ab027d) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x4, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4800) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000001140)) socket$isdn_base(0x22, 0x3, 0x0) 17:10:18 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000080)) 17:10:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2403.504301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2403.511554] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 [ 2403.565489] FAULT_INJECTION: forcing a failure. [ 2403.565489] name failslab, interval 1, probability 0, space 0, times 0 [ 2403.580260] CPU: 0 PID: 5047 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2403.588274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2403.597626] Call Trace: [ 2403.600284] dump_stack+0x1b2/0x281 [ 2403.603906] should_fail.cold+0x10a/0x149 [ 2403.608049] should_failslab+0xd6/0x130 [ 2403.612010] kmem_cache_alloc+0x28e/0x3c0 [ 2403.616150] ? mempool_free+0x1d0/0x1d0 [ 2403.620123] mempool_create_node+0x2d2/0x3e0 [ 2403.624538] bioset_create+0x31b/0x750 [ 2403.628424] ? kmem_cache_alloc_node+0x38b/0x410 [ 2403.633171] blk_alloc_queue_node+0xa8/0xb40 [ 2403.637656] blk_mq_init_queue+0x42/0x90 [ 2403.641709] loop_add+0x303/0x830 [ 2403.645152] ? loop_queue_rq+0x280/0x280 [ 2403.649200] ? trace_hardirqs_on+0x10/0x10 [ 2403.653437] loop_control_ioctl+0x161/0x3f0 [ 2403.657749] ? loop_lookup+0x190/0x190 [ 2403.661621] ? SyS_write+0x1b7/0x210 [ 2403.665319] ? loop_lookup+0x190/0x190 [ 2403.669286] do_vfs_ioctl+0x75a/0xff0 [ 2403.673084] ? lock_acquire+0x170/0x3f0 [ 2403.677139] ? ioctl_preallocate+0x1a0/0x1a0 [ 2403.681544] ? __fget+0x265/0x3e0 [ 2403.684992] ? do_vfs_ioctl+0xff0/0xff0 [ 2403.688953] ? security_file_ioctl+0x83/0xb0 [ 2403.693354] SyS_ioctl+0x7f/0xb0 [ 2403.696711] ? do_vfs_ioctl+0xff0/0xff0 [ 2403.700678] do_syscall_64+0x1d5/0x640 [ 2403.704564] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2403.709754] RIP: 0033:0x7ffa0bda9109 [ 2403.713456] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2403.721148] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2403.728395] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2403.735646] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2403.742896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2403.750143] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:19 executing program 0: io_setup(0x7, &(0x7f0000000000)=0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}]}, 0x58}}, 0x0) io_setup(0x0, &(0x7f00000004c0)) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb4, 0x4, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfdb}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) r2 = semget$private(0x0, 0x1, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0x9]) semctl$IPC_RMID(r2, 0x0, 0x0) io_cancel(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0xffff, 0xffffffffffffffff, &(0x7f0000000280)="15464ad7066ab78728ea3af091e47c410f3ba9fa22b24788dc8aebd2f39fb94a036312ed311e2b955f5067e0ba82ad33b1507e9b3332c075ba3b4cca2dfe25ea2f07d1eabb44f5e68ee1f6a16443b491a79299d057ac468061", 0x59, 0x1000, 0x0, 0x2}, &(0x7f0000000340)) io_cancel(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x3f, 0xffffffffffffffff, &(0x7f0000000380)="5623b1d470717dd46509ba052968111e5b2ed3bca70617f3ff99725528c9347cbdff1c57a5dc09c7c624a653045fc565ae76a90964cd58cd5b49a7cfbcc1ca02b2516700de30704147c2f03ef4ddb3a45b6520837ff812d47044e1f7c57036686fb19a007004400ed726461c6bb71fa510c92c5ff961d70a576dc8ea6d9280cf49259f71792cc51eedbfc3c15e2e6c4c98b85ad9712aa6990639073f937715335e37fa1d31745359f69aeb7fbed28ab7b7326f566f8bee9d7b1ab09218cf35", 0xbf, 0x6, 0x0, 0x2}, &(0x7f0000000480)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="940000000a0601020000000000000000010000000520010007000000080009400000000105000100070000000500010007000000080009400000007450000880180007801400170070696d367265670000000000000000000c000780060005404e2100000c000780060005404e2100001c0007801800028014000240fc0200000000000000000000000000010800094000000000"], 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$nl_netfilter(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a0a0104000000000000000001000000404b662047980f925b78e250abd0b87732a6e0f56736493e771c6abdab3db525b1e7c5d18142eb373390f5e4f747bc56a72b234d39f57a65a351d2ccfbf9"], 0x14}}, 0x0) io_setup(0x7, &(0x7f0000000000)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}]}, 0x58}}, 0x0) (async) io_setup(0x0, &(0x7f00000004c0)) (async) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb4, 0x4, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfdb}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) (async) semget$private(0x0, 0x1, 0x0) (async) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0x9]) (async) semctl$IPC_RMID(r2, 0x0, 0x0) (async) io_cancel(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0xffff, 0xffffffffffffffff, &(0x7f0000000280)="15464ad7066ab78728ea3af091e47c410f3ba9fa22b24788dc8aebd2f39fb94a036312ed311e2b955f5067e0ba82ad33b1507e9b3332c075ba3b4cca2dfe25ea2f07d1eabb44f5e68ee1f6a16443b491a79299d057ac468061", 0x59, 0x1000, 0x0, 0x2}, &(0x7f0000000340)) (async) io_cancel(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x3f, 0xffffffffffffffff, &(0x7f0000000380)="5623b1d470717dd46509ba052968111e5b2ed3bca70617f3ff99725528c9347cbdff1c57a5dc09c7c624a653045fc565ae76a90964cd58cd5b49a7cfbcc1ca02b2516700de30704147c2f03ef4ddb3a45b6520837ff812d47044e1f7c57036686fb19a007004400ed726461c6bb71fa510c92c5ff961d70a576dc8ea6d9280cf49259f71792cc51eedbfc3c15e2e6c4c98b85ad9712aa6990639073f937715335e37fa1d31745359f69aeb7fbed28ab7b7326f566f8bee9d7b1ab09218cf35", 0xbf, 0x6, 0x0, 0x2}, &(0x7f0000000480)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="940000000a0601020000000000000000010000000520010007000000080009400000000105000100070000000500010007000000080009400000007450000880180007801400170070696d367265670000000000000000000c000780060005404e2100000c000780060005404e2100001c0007801800028014000240fc0200000000000000000000000000010800094000000000"], 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) sendmsg$nl_netfilter(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a0a0104000000000000000001000000404b662047980f925b78e250abd0b87732a6e0f56736493e771c6abdab3db525b1e7c5d18142eb373390f5e4f747bc56a72b234d39f57a65a351d2ccfbf9"], 0x14}}, 0x0) (async) 17:10:19 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x4, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x8) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000080), 0x4) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x4, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x8) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000080), 0x4) (async) 17:10:19 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000080)) (async) 17:10:19 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) (async) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x1, 0x10000) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000140)=""/4096) r1 = socket(0x2a, 0x5, 0x76ab027d) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x4, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4800) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000001140)) (async) socket$isdn_base(0x22, 0x3, 0x0) 17:10:19 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) 17:10:19 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 17) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:19 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x90000) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0x1, 0x400]) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0xa400, 0x0) ioctl$PTP_CLOCK_GETCAPS(r2, 0x80503d01, &(0x7f0000000140)) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:19 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) recvmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000000)=@x25, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000000100)=""/64, 0x40}], 0x2, &(0x7f0000000180)=""/179, 0xb3}, 0x2000) 17:10:19 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000080)) [ 2403.820916] FAULT_INJECTION: forcing a failure. [ 2403.820916] name failslab, interval 1, probability 0, space 0, times 0 [ 2403.836848] CPU: 0 PID: 5066 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2403.844674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2403.854053] Call Trace: [ 2403.856643] dump_stack+0x1b2/0x281 [ 2403.860273] should_fail.cold+0x10a/0x149 [ 2403.864423] should_failslab+0xd6/0x130 17:10:19 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 17:10:19 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) recvmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000000)=@x25, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000000100)=""/64, 0x40}], 0x2, &(0x7f0000000180)=""/179, 0xb3}, 0x2000) [ 2403.868407] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2403.873514] ? mempool_free+0x1d0/0x1d0 [ 2403.877491] mempool_create_node+0x76/0x3e0 [ 2403.881809] ? mempool_kmalloc+0x20/0x20 [ 2403.885861] bioset_create+0x506/0x750 [ 2403.885873] ? kmem_cache_alloc_node+0x38b/0x410 [ 2403.885885] blk_alloc_queue_node+0xa8/0xb40 [ 2403.885897] blk_mq_init_queue+0x42/0x90 [ 2403.885908] loop_add+0x303/0x830 [ 2403.885918] ? loop_queue_rq+0x280/0x280 [ 2403.910443] ? trace_hardirqs_on+0x10/0x10 [ 2403.914684] loop_control_ioctl+0x161/0x3f0 17:10:19 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x1, 0x10000) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000140)=""/4096) (async) r1 = socket(0x2a, 0x5, 0x76ab027d) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x4, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4800) (async) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000001140)) socket$isdn_base(0x22, 0x3, 0x0) [ 2403.919013] ? loop_lookup+0x190/0x190 [ 2403.922908] ? SyS_write+0x1b7/0x210 [ 2403.926625] ? loop_lookup+0x190/0x190 [ 2403.930523] do_vfs_ioctl+0x75a/0xff0 [ 2403.934327] ? lock_acquire+0x170/0x3f0 [ 2403.938303] ? ioctl_preallocate+0x1a0/0x1a0 [ 2403.942716] ? __fget+0x265/0x3e0 [ 2403.946330] ? do_vfs_ioctl+0xff0/0xff0 [ 2403.950298] ? security_file_ioctl+0x83/0xb0 [ 2403.950311] SyS_ioctl+0x7f/0xb0 [ 2403.950322] ? do_vfs_ioctl+0xff0/0xff0 [ 2403.958065] do_syscall_64+0x1d5/0x640 [ 2403.958082] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2403.958091] RIP: 0033:0x7ffa0bda9109 [ 2403.974802] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2403.982508] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2403.987736] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2403.989770] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2403.989777] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2403.989782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2403.989789] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r1 = socket(0x25, 0x5, 0x5) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1001}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="6400000000080000000000000000000043410baa4d936f683234aaa3bdc695070000000900010873797a000000000007000240001900000900010073797a300000000005000300060000001c000480080002400000007f0800000000000003080001400000000209000100"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x24008880) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0xc180, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000000b010200000000000000000c000004080003400000000108000340000000010600010080080000080002400000000508000240000000000800024000000001"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20004004) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x711001, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4011}, 0x7087216a3520a6d6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000004c0)) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xa}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x19}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x24}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0xa}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x14}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040080}, 0x20) 17:10:19 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 17:10:19 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040)) 17:10:19 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) recvmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000000)=@x25, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000000100)=""/64, 0x40}], 0x2, &(0x7f0000000180)=""/179, 0xb3}, 0x2000) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) recvmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000000)=@x25, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000000100)=""/64, 0x40}], 0x2, &(0x7f0000000180)=""/179, 0xb3}, 0x2000) (async) 17:10:19 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x90000) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0x1, 0x400]) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0xa400, 0x0) ioctl$PTP_CLOCK_GETCAPS(r2, 0x80503d01, &(0x7f0000000140)) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x90000) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0x1, 0x400]) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0xa400, 0x0) (async) ioctl$PTP_CLOCK_GETCAPS(r2, 0x80503d01, &(0x7f0000000140)) (async) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) 17:10:19 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 18) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:19 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040)) socket$isdn_base(0x22, 0x3, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040)) (async) 17:10:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r1 = socket(0x25, 0x5, 0x5) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1001}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="6400000000080000000000000000000043410baa4d936f683234aaa3bdc695070000000900010873797a000000000007000240001900000900010073797a300000000005000300060000001c000480080002400000007f0800000000000003080001400000000209000100"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x24008880) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0xc180, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000000b010200000000000000000c000004080003400000000108000340000000010600010080080000080002400000000508000240000000000800024000000001"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20004004) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x711001, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4011}, 0x7087216a3520a6d6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000004c0)) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xa}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x19}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x24}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0xa}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x14}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040080}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (async) socket(0x25, 0x5, 0x5) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1001}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="6400000000080000000000000000000043410baa4d936f683234aaa3bdc695070000000900010873797a000000000007000240001900000900010073797a300000000005000300060000001c000480080002400000007f0800000000000003080001400000000209000100"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x24008880) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0xc180, 0x0) (async) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000000b010200000000000000000c000004080003400000000108000340000000010600010080080000080002400000000508000240000000000800024000000001"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20004004) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x711001, 0x0) (async) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4011}, 0x7087216a3520a6d6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000004c0)) (async) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xa}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x19}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x24}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0xa}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x14}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040080}, 0x20) (async) 17:10:19 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 17:10:19 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040)) 17:10:19 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x121081, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4cc040, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) openat$cgroup_freezer_state(r2, &(0x7f00000000c0), 0x2, 0x0) 17:10:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x7ba1b7a1dbf36a03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d0dc5d6, 0x0, @perf_config_ext, 0x6801, 0x9, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) [ 2404.168425] FAULT_INJECTION: forcing a failure. [ 2404.168425] name failslab, interval 1, probability 0, space 0, times 0 [ 2404.187995] CPU: 1 PID: 5122 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2404.195815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2404.205169] Call Trace: [ 2404.207769] dump_stack+0x1b2/0x281 [ 2404.211398] should_fail.cold+0x10a/0x149 17:10:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x7ba1b7a1dbf36a03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d0dc5d6, 0x0, @perf_config_ext, 0x6801, 0x9, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) 17:10:19 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x121081, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4cc040, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) openat$cgroup_freezer_state(r2, &(0x7f00000000c0), 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x121081, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4cc040, 0x0) (async) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) openat$cgroup_freezer_state(r2, &(0x7f00000000c0), 0x2, 0x0) (async) [ 2404.211413] should_failslab+0xd6/0x130 [ 2404.211426] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2404.219515] ? mempool_free+0x1d0/0x1d0 [ 2404.219534] __kmalloc_node+0x38/0x70 [ 2404.219546] mempool_create_node+0xb1/0x3e0 [ 2404.236745] ? mempool_kmalloc+0x20/0x20 [ 2404.240900] bioset_create+0x506/0x750 [ 2404.244792] ? kmem_cache_alloc_node+0x38b/0x410 [ 2404.249561] blk_alloc_queue_node+0xa8/0xb40 [ 2404.253977] blk_mq_init_queue+0x42/0x90 [ 2404.258044] loop_add+0x303/0x830 [ 2404.261508] ? loop_queue_rq+0x280/0x280 17:10:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x7ba1b7a1dbf36a03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d0dc5d6, 0x0, @perf_config_ext, 0x6801, 0x9, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) 17:10:19 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) [ 2404.265586] ? trace_hardirqs_on+0x10/0x10 [ 2404.269837] loop_control_ioctl+0x161/0x3f0 [ 2404.274157] ? loop_lookup+0x190/0x190 [ 2404.278043] ? SyS_write+0x1b7/0x210 [ 2404.281754] ? loop_lookup+0x190/0x190 [ 2404.285636] do_vfs_ioctl+0x75a/0xff0 [ 2404.289438] ? lock_acquire+0x170/0x3f0 [ 2404.293409] ? ioctl_preallocate+0x1a0/0x1a0 [ 2404.297815] ? __fget+0x265/0x3e0 [ 2404.301271] ? do_vfs_ioctl+0xff0/0xff0 [ 2404.305247] ? security_file_ioctl+0x83/0xb0 [ 2404.309664] SyS_ioctl+0x7f/0xb0 [ 2404.313027] ? do_vfs_ioctl+0xff0/0xff0 [ 2404.317000] do_syscall_64+0x1d5/0x640 [ 2404.320892] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2404.326076] RIP: 0033:0x7ffa0bda9109 [ 2404.329778] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2404.337481] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2404.344913] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2404.352255] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2404.359628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 17:10:19 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x90000) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0x1, 0x400]) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0xa400, 0x0) ioctl$PTP_CLOCK_GETCAPS(r2, 0x80503d01, &(0x7f0000000140)) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x90000) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0x1, 0x400]) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0xa400, 0x0) (async) ioctl$PTP_CLOCK_GETCAPS(r2, 0x80503d01, &(0x7f0000000140)) (async) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) [ 2404.366894] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:19 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 19) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:19 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x121081, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4cc040, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) openat$cgroup_freezer_state(r2, &(0x7f00000000c0), 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x121081, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4cc040, 0x0) (async) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) openat$cgroup_freezer_state(r2, &(0x7f00000000c0), 0x2, 0x0) (async) 17:10:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r1 = socket(0x25, 0x5, 0x5) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1001}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="6400000000080000000000000000000043410baa4d936f683234aaa3bdc695070000000900010873797a000000000007000240001900000900010073797a300000000005000300060000001c000480080002400000007f0800000000000003080001400000000209000100"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x24008880) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0xc180, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000000b010200000000000000000c000004080003400000000108000340000000010600010080080000080002400000000508000240000000000800024000000001"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20004004) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x711001, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4011}, 0x7087216a3520a6d6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000004c0)) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xa}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x19}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x24}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0xa}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x14}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040080}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (async) socket(0x25, 0x5, 0x5) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1001}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="6400000000080000000000000000000043410baa4d936f683234aaa3bdc695070000000900010873797a000000000007000240001900000900010073797a300000000005000300060000001c000480080002400000007f0800000000000003080001400000000209000100"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x24008880) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0xc180, 0x0) (async) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000000b010200000000000000000c000004080003400000000108000340000000010600010080080000080002400000000508000240000000000800024000000001"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20004004) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x711001, 0x0) (async) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4011}, 0x7087216a3520a6d6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000004c0)) (async) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xa}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x19}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x24}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0xa}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x14}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040080}, 0x20) (async) 17:10:19 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x401}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40) socket$isdn_base(0x22, 0x3, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000180)=""/110) bind$isdn_base(r1, &(0x7f0000000140)={0x22, 0x0, 0x27, 0x1, 0x1}, 0x6) 17:10:19 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x4, 0x1, 0x1, 0x0, 0x0, 0x100a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x31, 0x5}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000100)={0x7}) 17:10:19 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000000303030000000000000000000300000008000340000000dd080003400000000908000340000000ff080003408000000008000340000034e658371c4b54089ab735dbe4600b0376fade0a093a86a5dea633856e1f5e04cd00e2ecacc821f2dc9fca737c433f42ad442fbdebe6173cf1edd1964f99332c8525f8985ae1ea129b76cd810df8378bb1bf0923bd6dba72fd24430eedeff72660efc267e48e774e3fdd752eac0c79ed85b62a0a12466a4ce7af15768e608ddb4c93ae8fc9ce1bc4b84329df6f47f7e4cc7dd415487540ffaa"], 0x3c}, 0x1, 0x0, 0x0, 0x10000000}, 0x8000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000180)={0x0, 0x7fff, 0x4, 0x20, 0xfffffffe, 0xd9b}) 17:10:19 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) 17:10:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x401}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000180)=""/110) (async) bind$isdn_base(r1, &(0x7f0000000140)={0x22, 0x0, 0x27, 0x1, 0x1}, 0x6) 17:10:19 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000000303030000000000000000000300000008000340000000dd080003400000000908000340000000ff080003408000000008000340000034e658371c4b54089ab735dbe4600b0376fade0a093a86a5dea633856e1f5e04cd00e2ecacc821f2dc9fca737c433f42ad442fbdebe6173cf1edd1964f99332c8525f8985ae1ea129b76cd810df8378bb1bf0923bd6dba72fd24430eedeff72660efc267e48e774e3fdd752eac0c79ed85b62a0a12466a4ce7af15768e608ddb4c93ae8fc9ce1bc4b84329df6f47f7e4cc7dd415487540ffaa"], 0x3c}, 0x1, 0x0, 0x0, 0x10000000}, 0x8000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000180)={0x0, 0x7fff, 0x4, 0x20, 0xfffffffe, 0xd9b}) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000000303030000000000000000000300000008000340000000dd080003400000000908000340000000ff080003408000000008000340000034e658371c4b54089ab735dbe4600b0376fade0a093a86a5dea633856e1f5e04cd00e2ecacc821f2dc9fca737c433f42ad442fbdebe6173cf1edd1964f99332c8525f8985ae1ea129b76cd810df8378bb1bf0923bd6dba72fd24430eedeff72660efc267e48e774e3fdd752eac0c79ed85b62a0a12466a4ce7af15768e608ddb4c93ae8fc9ce1bc4b84329df6f47f7e4cc7dd415487540ffaa"], 0x3c}, 0x1, 0x0, 0x0, 0x10000000}, 0x8000) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) (async) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000180)={0x0, 0x7fff, 0x4, 0x20, 0xfffffffe, 0xd9b}) (async) 17:10:19 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x4, 0x1, 0x1, 0x0, 0x0, 0x100a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x31, 0x5}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) socket$isdn_base(0x22, 0x3, 0x0) (async) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000100)={0x7}) [ 2404.478112] FAULT_INJECTION: forcing a failure. [ 2404.478112] name failslab, interval 1, probability 0, space 0, times 0 [ 2404.501046] CPU: 0 PID: 5187 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2404.508869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2404.518224] Call Trace: [ 2404.520816] dump_stack+0x1b2/0x281 17:10:19 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000000303030000000000000000000300000008000340000000dd080003400000000908000340000000ff080003408000000008000340000034e658371c4b54089ab735dbe4600b0376fade0a093a86a5dea633856e1f5e04cd00e2ecacc821f2dc9fca737c433f42ad442fbdebe6173cf1edd1964f99332c8525f8985ae1ea129b76cd810df8378bb1bf0923bd6dba72fd24430eedeff72660efc267e48e774e3fdd752eac0c79ed85b62a0a12466a4ce7af15768e608ddb4c93ae8fc9ce1bc4b84329df6f47f7e4cc7dd415487540ffaa"], 0x3c}, 0x1, 0x0, 0x0, 0x10000000}, 0x8000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000180)={0x0, 0x7fff, 0x4, 0x20, 0xfffffffe, 0xd9b}) [ 2404.524448] should_fail.cold+0x10a/0x149 [ 2404.528604] should_failslab+0xd6/0x130 [ 2404.532842] kmem_cache_alloc+0x28e/0x3c0 [ 2404.537084] ? mempool_free+0x1d0/0x1d0 [ 2404.541069] mempool_create_node+0x2d2/0x3e0 [ 2404.545481] bioset_create+0x506/0x750 [ 2404.545494] ? kmem_cache_alloc_node+0x38b/0x410 [ 2404.545508] blk_alloc_queue_node+0xa8/0xb40 [ 2404.545520] blk_mq_init_queue+0x42/0x90 [ 2404.545529] loop_add+0x303/0x830 [ 2404.566139] ? loop_queue_rq+0x280/0x280 [ 2404.570379] ? trace_hardirqs_on+0x10/0x10 [ 2404.574623] loop_control_ioctl+0x161/0x3f0 [ 2404.578958] ? loop_lookup+0x190/0x190 [ 2404.578969] ? SyS_write+0x1b7/0x210 [ 2404.578979] ? loop_lookup+0x190/0x190 [ 2404.578990] do_vfs_ioctl+0x75a/0xff0 [ 2404.586609] ? lock_acquire+0x170/0x3f0 [ 2404.586623] ? ioctl_preallocate+0x1a0/0x1a0 [ 2404.586636] ? __fget+0x265/0x3e0 [ 2404.586646] ? do_vfs_ioctl+0xff0/0xff0 [ 2404.607770] ? security_file_ioctl+0x83/0xb0 [ 2404.607784] SyS_ioctl+0x7f/0xb0 [ 2404.607793] ? do_vfs_ioctl+0xff0/0xff0 [ 2404.607806] do_syscall_64+0x1d5/0x640 [ 2404.627437] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2404.632624] RIP: 0033:0x7ffa0bda9109 [ 2404.636324] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2404.644012] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2404.651262] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2404.658512] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2404.665769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 17:10:20 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 20) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:20 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, ',]{-}#'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xbe7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4004010) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) 17:10:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x401}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40) socket$isdn_base(0x22, 0x3, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000180)=""/110) bind$isdn_base(r1, &(0x7f0000000140)={0x22, 0x0, 0x27, 0x1, 0x1}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x401}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000180)=""/110) (async) bind$isdn_base(r1, &(0x7f0000000140)={0x22, 0x0, 0x27, 0x1, 0x1}, 0x6) (async) 17:10:20 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x4, 0x1, 0x1, 0x0, 0x0, 0x100a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x31, 0x5}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000100)={0x7}) 17:10:20 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8400, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000080)={0xffffffffffffffff, 0xc3}) 17:10:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="150000000a0a01040001000020"], 0x14}}, 0x0) [ 2404.673016] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:20 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, ',]{-}#'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xbe7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4004010) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) socket$can_raw(0x1d, 0x3, 0x1) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, ',]{-}#'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xbe7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4004010) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) (async) 17:10:20 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8400, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000080)={0xffffffffffffffff, 0xc3}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8400, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000080)={0xffffffffffffffff, 0xc3}) (async) 17:10:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="150000000a0a01040001000020"], 0x14}}, 0x0) [ 2404.752955] FAULT_INJECTION: forcing a failure. [ 2404.752955] name failslab, interval 1, probability 0, space 0, times 0 [ 2404.765000] CPU: 1 PID: 5266 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2404.772800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2404.772804] Call Trace: [ 2404.772820] dump_stack+0x1b2/0x281 [ 2404.772834] should_fail.cold+0x10a/0x149 [ 2404.772848] should_failslab+0xd6/0x130 [ 2404.772860] kmem_cache_alloc+0x28e/0x3c0 [ 2404.772870] ? mempool_free+0x1d0/0x1d0 [ 2404.772884] mempool_create_node+0x2d2/0x3e0 [ 2404.772901] bioset_create+0x506/0x750 [ 2404.772910] ? kmem_cache_alloc_node+0x38b/0x410 [ 2404.772924] blk_alloc_queue_node+0xa8/0xb40 [ 2404.772937] blk_mq_init_queue+0x42/0x90 [ 2404.772947] loop_add+0x303/0x830 [ 2404.772959] ? loop_queue_rq+0x280/0x280 [ 2404.833778] ? trace_hardirqs_on+0x10/0x10 [ 2404.838022] loop_control_ioctl+0x161/0x3f0 [ 2404.842347] ? loop_lookup+0x190/0x190 [ 2404.846225] ? SyS_write+0x1b7/0x210 [ 2404.849929] ? loop_lookup+0x190/0x190 [ 2404.849941] do_vfs_ioctl+0x75a/0xff0 [ 2404.849953] ? lock_acquire+0x170/0x3f0 [ 2404.849962] ? ioctl_preallocate+0x1a0/0x1a0 [ 2404.849973] ? __fget+0x265/0x3e0 [ 2404.869408] ? do_vfs_ioctl+0xff0/0xff0 [ 2404.873378] ? security_file_ioctl+0x83/0xb0 [ 2404.877793] SyS_ioctl+0x7f/0xb0 [ 2404.881157] ? do_vfs_ioctl+0xff0/0xff0 [ 2404.885133] do_syscall_64+0x1d5/0x640 [ 2404.889022] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2404.894207] RIP: 0033:0x7ffa0bda9109 17:10:20 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8400, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000080)={0xffffffffffffffff, 0xc3}) 17:10:20 executing program 5: r0 = semget$private(0x0, 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x9]) r1 = getuid() semtimedop(r0, &(0x7f0000000280)=[{0x2, 0x4, 0x1800}, {0x4, 0x7, 0x1000}, {0x1, 0x7}, {0x4, 0x9}, {0x2, 0x4949, 0x1400}, {0x2, 0x8, 0x1800}, {0x3, 0x2}], 0x7, &(0x7f00000002c0)={0x0, 0x3938700}) r2 = semget(0x3, 0x1, 0x200) semctl$IPC_INFO(r2, 0x0, 0x3, &(0x7f0000000340)=""/87) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000003c0)=""/147) r3 = getuid() getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000200)={{0x0, r1, 0xffffffffffffffff, r3, r4, 0x3, 0xc1}, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xa5}) r5 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000480), 0x9}, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000040), &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000580)="77b3c29e72ed9baf5756d500adc1a10098ea8601a0eaf3b64bd915b7231752276db7ba4187fb5f9b1f2e718a8281220039c6e51224277cde219e4d20a1b0be736063cd209843883da91983143a836864730ae00a344c7b8e124ee6058b9cea94c8fa4c808cf46c23ac707f823a64caf5b58657ecd603feafa5e99589b237b5cbf00a9324bb2292e9897786a430bd443a8faaa4ab8ad33a5aa3732ad6cff6ef44a62d6c66ce5cc04d34ab42da0ba971fe7d51137c41078bf4f1987247693961564cfb5d9ca66d2acfc4fd088a0ac43bc8341c54d3d28857d988a5", 0xda, 0xfffffffffffffffe) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x15, 0x20, 0x1, 0x1f, 0x0, 0x5, 0x2122a, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x48, 0x9, 0x5a1, 0x4, 0x5a9, 0x31, 0x101, 0x0, 0x7ff, 0x0, 0x3}, r6, 0xd, r5, 0x2) 17:10:20 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2db}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7461ca6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x944}, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000001c0), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000200), 0x4) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r3) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)={0x338, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x79ea1fba}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}]}, 0x338}}, 0x20000080) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:20 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 21) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:20 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2db}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7461ca6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x944}, 0x4) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000001c0), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000200), 0x4) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) (async) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r3) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)={0x338, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x79ea1fba}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}]}, 0x338}}, 0x20000080) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:20 executing program 5: r0 = semget$private(0x0, 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x9]) (async) r1 = getuid() (async) semtimedop(r0, &(0x7f0000000280)=[{0x2, 0x4, 0x1800}, {0x4, 0x7, 0x1000}, {0x1, 0x7}, {0x4, 0x9}, {0x2, 0x4949, 0x1400}, {0x2, 0x8, 0x1800}, {0x3, 0x2}], 0x7, &(0x7f00000002c0)={0x0, 0x3938700}) (async) r2 = semget(0x3, 0x1, 0x200) semctl$IPC_INFO(r2, 0x0, 0x3, &(0x7f0000000340)=""/87) (async) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000003c0)=""/147) r3 = getuid() (async) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000200)={{0x0, r1, 0xffffffffffffffff, r3, r4, 0x3, 0xc1}, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xa5}) (async) r5 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000480), 0x9}, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) add_key$user(&(0x7f0000000040), &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000580)="77b3c29e72ed9baf5756d500adc1a10098ea8601a0eaf3b64bd915b7231752276db7ba4187fb5f9b1f2e718a8281220039c6e51224277cde219e4d20a1b0be736063cd209843883da91983143a836864730ae00a344c7b8e124ee6058b9cea94c8fa4c808cf46c23ac707f823a64caf5b58657ecd603feafa5e99589b237b5cbf00a9324bb2292e9897786a430bd443a8faaa4ab8ad33a5aa3732ad6cff6ef44a62d6c66ce5cc04d34ab42da0ba971fe7d51137c41078bf4f1987247693961564cfb5d9ca66d2acfc4fd088a0ac43bc8341c54d3d28857d988a5", 0xda, 0xfffffffffffffffe) (async) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, 0x0) (async) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x15, 0x20, 0x1, 0x1f, 0x0, 0x5, 0x2122a, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x48, 0x9, 0x5a1, 0x4, 0x5a9, 0x31, 0x101, 0x0, 0x7ff, 0x0, 0x3}, r6, 0xd, r5, 0x2) 17:10:20 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, ',]{-}#'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xbe7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4004010) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) [ 2404.897913] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2404.905621] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2404.912896] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2404.920169] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2404.927439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2404.934711] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:20 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000001c0), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000200), 0x4) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gretap0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='sit0\n\x00'/16, @ANYRES32=0x0, @ANYBLOB="00010040000057f600000003498b006400680000002f907864010102e0000002863800000003000ef4a77b9a6b9b94de436900d80306116e5649060e6525b7ff1ca23bacf0aedbde020e4d5b3bbdb6da2a8fcf8f172b0602820294040000890f97e00000016401010164010100000000"]}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x20, 0x20, 0x20, 0xcedf, {{0x30, 0x4, 0x1, 0x1, 0xc0, 0x67, 0x0, 0x3f, 0x29, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x1c, 0xc2, 0x1, 0xc, [{@remote, 0x8000}, {@broadcast, 0xde8a}, {@private=0xa010100, 0x80}]}, @cipso={0x86, 0x20, 0x0, [{0x7, 0x2}, {0x1, 0x8, "9897d5d721d1"}, {0x5, 0x10, "7efcb5c2c13296aa9b60735acde6"}]}, @generic={0x186, 0xd, "616a4613161f976445c639"}, @timestamp_prespec={0x44, 0x2c, 0x45, 0x3, 0x2, [{@loopback, 0x3}, {@multicast2, 0x4}, {@rand_addr=0x64010100, 0x1}, {@empty, 0x9}, {@empty, 0xf260}]}, @timestamp_prespec={0x44, 0xc, 0xc7, 0x3, 0x7, [{@local, 0x8}]}, @cipso={0x86, 0x15, 0x0, [{0x0, 0x9, "23f034826cff4f"}, {0x2, 0x6, 'G,FS'}]}, @end, @noop, @lsrr={0x83, 0x13, 0x30, [@loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}, @noop]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000c40)={0x738, 0x0, 0x1, 0x4070bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6f77}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff4b}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x316}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x18}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r7}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8, 0x1, r9}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x1, 0xa5, 0x1ff}, {0x2761, 0x4, 0xc2, 0x7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x738}, 0x1, 0x0, 0x0, 0x4000}, 0xdfe0cc49ff565baa) socket$isdn_base(0x22, 0x3, 0x0) 17:10:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="150000000a0a01040001000020"], 0x14}}, 0x0) 17:10:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)=""/16) [ 2404.985336] FAULT_INJECTION: forcing a failure. [ 2404.985336] name failslab, interval 1, probability 0, space 0, times 0 [ 2404.999744] CPU: 1 PID: 5295 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2405.007568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2405.016931] Call Trace: [ 2405.019542] dump_stack+0x1b2/0x281 [ 2405.023190] should_fail.cold+0x10a/0x149 [ 2405.027348] should_failslab+0xd6/0x130 17:10:20 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2db}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7461ca6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x944}, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000001c0), 0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000200), 0x4) (async, rerun: 32) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) (async, rerun: 32) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) (async) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r3) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)={0x338, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x79ea1fba}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}]}, 0x338}}, 0x20000080) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (async) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)=""/16) [ 2405.031341] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2405.036450] bdi_alloc_node+0x5d/0x2e0 [ 2405.040355] blk_alloc_queue_node+0xe2/0xb40 [ 2405.044780] blk_mq_init_queue+0x42/0x90 [ 2405.048850] loop_add+0x303/0x830 [ 2405.052314] ? loop_queue_rq+0x280/0x280 [ 2405.056389] ? trace_hardirqs_on+0x10/0x10 [ 2405.060643] loop_control_ioctl+0x161/0x3f0 [ 2405.064972] ? loop_lookup+0x190/0x190 [ 2405.068871] ? SyS_write+0x1b7/0x210 [ 2405.072592] ? loop_lookup+0x190/0x190 [ 2405.076485] do_vfs_ioctl+0x75a/0xff0 [ 2405.080306] ? lock_acquire+0x170/0x3f0 17:10:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (async) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)=""/16) 17:10:20 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:20 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2405.084288] ? ioctl_preallocate+0x1a0/0x1a0 [ 2405.088706] ? __fget+0x265/0x3e0 [ 2405.092174] ? do_vfs_ioctl+0xff0/0xff0 [ 2405.096156] ? security_file_ioctl+0x83/0xb0 [ 2405.100577] SyS_ioctl+0x7f/0xb0 [ 2405.103947] ? do_vfs_ioctl+0xff0/0xff0 [ 2405.107932] do_syscall_64+0x1d5/0x640 [ 2405.111828] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2405.117024] RIP: 0033:0x7ffa0bda9109 [ 2405.120738] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2405.128445] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 17:10:20 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 22) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:20 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) 17:10:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) 17:10:20 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, 0x0, 0x25, 0x11}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x122, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 17:10:20 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000001c0), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000200), 0x4) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gretap0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='sit0\n\x00'/16, @ANYRES32=0x0, @ANYBLOB="00010040000057f600000003498b006400680000002f907864010102e0000002863800000003000ef4a77b9a6b9b94de436900d80306116e5649060e6525b7ff1ca23bacf0aedbde020e4d5b3bbdb6da2a8fcf8f172b0602820294040000890f97e00000016401010164010100000000"]}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x20, 0x20, 0x20, 0xcedf, {{0x30, 0x4, 0x1, 0x1, 0xc0, 0x67, 0x0, 0x3f, 0x29, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x1c, 0xc2, 0x1, 0xc, [{@remote, 0x8000}, {@broadcast, 0xde8a}, {@private=0xa010100, 0x80}]}, @cipso={0x86, 0x20, 0x0, [{0x7, 0x2}, {0x1, 0x8, "9897d5d721d1"}, {0x5, 0x10, "7efcb5c2c13296aa9b60735acde6"}]}, @generic={0x186, 0xd, "616a4613161f976445c639"}, @timestamp_prespec={0x44, 0x2c, 0x45, 0x3, 0x2, [{@loopback, 0x3}, {@multicast2, 0x4}, {@rand_addr=0x64010100, 0x1}, {@empty, 0x9}, {@empty, 0xf260}]}, @timestamp_prespec={0x44, 0xc, 0xc7, 0x3, 0x7, [{@local, 0x8}]}, @cipso={0x86, 0x15, 0x0, [{0x0, 0x9, "23f034826cff4f"}, {0x2, 0x6, 'G,FS'}]}, @end, @noop, @lsrr={0x83, 0x13, 0x30, [@loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}, @noop]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000c40)={0x738, 0x0, 0x1, 0x4070bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6f77}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff4b}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x316}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x18}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r7}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8, 0x1, r9}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x1, 0xa5, 0x1ff}, {0x2761, 0x4, 0xc2, 0x7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x738}, 0x1, 0x0, 0x0, 0x4000}, 0xdfe0cc49ff565baa) socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000001c0), 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000200), 0x4) (async) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) (async) syz_genetlink_get_family_id$team(&(0x7f0000000480), r2) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gretap0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='sit0\n\x00'/16, @ANYRES32=0x0, @ANYBLOB="00010040000057f600000003498b006400680000002f907864010102e0000002863800000003000ef4a77b9a6b9b94de436900d80306116e5649060e6525b7ff1ca23bacf0aedbde020e4d5b3bbdb6da2a8fcf8f172b0602820294040000890f97e00000016401010164010100000000"]}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x20, 0x20, 0x20, 0xcedf, {{0x30, 0x4, 0x1, 0x1, 0xc0, 0x67, 0x0, 0x3f, 0x29, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x1c, 0xc2, 0x1, 0xc, [{@remote, 0x8000}, {@broadcast, 0xde8a}, {@private=0xa010100, 0x80}]}, @cipso={0x86, 0x20, 0x0, [{0x7, 0x2}, {0x1, 0x8, "9897d5d721d1"}, {0x5, 0x10, "7efcb5c2c13296aa9b60735acde6"}]}, @generic={0x186, 0xd, "616a4613161f976445c639"}, @timestamp_prespec={0x44, 0x2c, 0x45, 0x3, 0x2, [{@loopback, 0x3}, {@multicast2, 0x4}, {@rand_addr=0x64010100, 0x1}, {@empty, 0x9}, {@empty, 0xf260}]}, @timestamp_prespec={0x44, 0xc, 0xc7, 0x3, 0x7, [{@local, 0x8}]}, @cipso={0x86, 0x15, 0x0, [{0x0, 0x9, "23f034826cff4f"}, {0x2, 0x6, 'G,FS'}]}, @end, @noop, @lsrr={0x83, 0x13, 0x30, [@loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}, @noop]}}}}}) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000c40)={0x738, 0x0, 0x1, 0x4070bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6f77}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff4b}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x316}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x18}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r7}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8, 0x1, r9}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x1, 0xa5, 0x1ff}, {0x2761, 0x4, 0xc2, 0x7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x738}, 0x1, 0x0, 0x0, 0x4000}, 0xdfe0cc49ff565baa) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) 17:10:20 executing program 5: r0 = semget$private(0x0, 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x9]) r1 = getuid() semtimedop(r0, &(0x7f0000000280)=[{0x2, 0x4, 0x1800}, {0x4, 0x7, 0x1000}, {0x1, 0x7}, {0x4, 0x9}, {0x2, 0x4949, 0x1400}, {0x2, 0x8, 0x1800}, {0x3, 0x2}], 0x7, &(0x7f00000002c0)={0x0, 0x3938700}) r2 = semget(0x3, 0x1, 0x200) semctl$IPC_INFO(r2, 0x0, 0x3, &(0x7f0000000340)=""/87) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000003c0)=""/147) r3 = getuid() getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000200)={{0x0, r1, 0xffffffffffffffff, r3, r4, 0x3, 0xc1}, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xa5}) r5 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000480), 0x9}, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000040), &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000580)="77b3c29e72ed9baf5756d500adc1a10098ea8601a0eaf3b64bd915b7231752276db7ba4187fb5f9b1f2e718a8281220039c6e51224277cde219e4d20a1b0be736063cd209843883da91983143a836864730ae00a344c7b8e124ee6058b9cea94c8fa4c808cf46c23ac707f823a64caf5b58657ecd603feafa5e99589b237b5cbf00a9324bb2292e9897786a430bd443a8faaa4ab8ad33a5aa3732ad6cff6ef44a62d6c66ce5cc04d34ab42da0ba971fe7d51137c41078bf4f1987247693961564cfb5d9ca66d2acfc4fd088a0ac43bc8341c54d3d28857d988a5", 0xda, 0xfffffffffffffffe) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x15, 0x20, 0x1, 0x1f, 0x0, 0x5, 0x2122a, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x48, 0x9, 0x5a1, 0x4, 0x5a9, 0x31, 0x101, 0x0, 0x7ff, 0x0, 0x3}, r6, 0xd, r5, 0x2) semget$private(0x0, 0x1, 0x0) (async) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x9]) (async) getuid() (async) semtimedop(r0, &(0x7f0000000280)=[{0x2, 0x4, 0x1800}, {0x4, 0x7, 0x1000}, {0x1, 0x7}, {0x4, 0x9}, {0x2, 0x4949, 0x1400}, {0x2, 0x8, 0x1800}, {0x3, 0x2}], 0x7, &(0x7f00000002c0)={0x0, 0x3938700}) (async) semget(0x3, 0x1, 0x200) (async) semctl$IPC_INFO(r2, 0x0, 0x3, &(0x7f0000000340)=""/87) (async) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000003c0)=""/147) (async) getuid() (async) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) (async) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000200)={{0x0, r1, 0xffffffffffffffff, r3, r4, 0x3, 0xc1}, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xa5}) (async) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000480), 0x9}, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) add_key$user(&(0x7f0000000040), &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000580)="77b3c29e72ed9baf5756d500adc1a10098ea8601a0eaf3b64bd915b7231752276db7ba4187fb5f9b1f2e718a8281220039c6e51224277cde219e4d20a1b0be736063cd209843883da91983143a836864730ae00a344c7b8e124ee6058b9cea94c8fa4c808cf46c23ac707f823a64caf5b58657ecd603feafa5e99589b237b5cbf00a9324bb2292e9897786a430bd443a8faaa4ab8ad33a5aa3732ad6cff6ef44a62d6c66ce5cc04d34ab42da0ba971fe7d51137c41078bf4f1987247693961564cfb5d9ca66d2acfc4fd088a0ac43bc8341c54d3d28857d988a5", 0xda, 0xfffffffffffffffe) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, 0x0) (async) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x15, 0x20, 0x1, 0x1f, 0x0, 0x5, 0x2122a, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x48, 0x9, 0x5a1, 0x4, 0x5a9, 0x31, 0x101, 0x0, 0x7ff, 0x0, 0x3}, r6, 0xd, r5, 0x2) (async) [ 2405.135717] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2405.142990] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2405.150290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2405.157569] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:20 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0)=[{{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x1}, {0x4, 0x0, 0x1}}], 0x18) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x8}, 0x10) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:20 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, 0x0, 0x25, 0x11}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x122, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040), 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 17:10:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) [ 2405.253300] FAULT_INJECTION: forcing a failure. [ 2405.253300] name failslab, interval 1, probability 0, space 0, times 0 [ 2405.270266] CPU: 1 PID: 5347 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2405.278087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2405.278092] Call Trace: [ 2405.278109] dump_stack+0x1b2/0x281 [ 2405.278124] should_fail.cold+0x10a/0x149 [ 2405.278139] should_failslab+0xd6/0x130 [ 2405.278152] kmem_cache_alloc_trace+0x29a/0x3d0 [ 2405.278165] wb_congested_get_create+0x15b/0x360 [ 2405.278181] wb_init+0x4f6/0x7c0 [ 2405.278191] ? __raw_spin_lock_init+0x28/0x100 [ 2405.278201] cgwb_bdi_init+0xe2/0x1e0 [ 2405.278208] bdi_alloc_node+0x224/0x2e0 [ 2405.278219] blk_alloc_queue_node+0xe2/0xb40 [ 2405.278233] blk_mq_init_queue+0x42/0x90 [ 2405.278244] loop_add+0x303/0x830 [ 2405.278254] ? loop_queue_rq+0x280/0x280 [ 2405.278261] ? trace_hardirqs_on+0x10/0x10 [ 2405.278274] loop_control_ioctl+0x161/0x3f0 17:10:20 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 23) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:20 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x73, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x0, 0x0, 0x0, 0x9, 0x2, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) 17:10:20 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, 0x0, 0x25, 0x11}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x122, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040), 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 17:10:20 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0)=[{{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x1}, {0x4, 0x0, 0x1}}], 0x18) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x8}, 0x10) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) (async) 17:10:20 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000001c0), 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000200), 0x4) (async) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) (async) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r2) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gretap0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='sit0\n\x00'/16, @ANYRES32=0x0, @ANYBLOB="00010040000057f600000003498b006400680000002f907864010102e0000002863800000003000ef4a77b9a6b9b94de436900d80306116e5649060e6525b7ff1ca23bacf0aedbde020e4d5b3bbdb6da2a8fcf8f172b0602820294040000890f97e00000016401010164010100000000"]}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x20, 0x20, 0x20, 0xcedf, {{0x30, 0x4, 0x1, 0x1, 0xc0, 0x67, 0x0, 0x3f, 0x29, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x1c, 0xc2, 0x1, 0xc, [{@remote, 0x8000}, {@broadcast, 0xde8a}, {@private=0xa010100, 0x80}]}, @cipso={0x86, 0x20, 0x0, [{0x7, 0x2}, {0x1, 0x8, "9897d5d721d1"}, {0x5, 0x10, "7efcb5c2c13296aa9b60735acde6"}]}, @generic={0x186, 0xd, "616a4613161f976445c639"}, @timestamp_prespec={0x44, 0x2c, 0x45, 0x3, 0x2, [{@loopback, 0x3}, {@multicast2, 0x4}, {@rand_addr=0x64010100, 0x1}, {@empty, 0x9}, {@empty, 0xf260}]}, @timestamp_prespec={0x44, 0xc, 0xc7, 0x3, 0x7, [{@local, 0x8}]}, @cipso={0x86, 0x15, 0x0, [{0x0, 0x9, "23f034826cff4f"}, {0x2, 0x6, 'G,FS'}]}, @end, @noop, @lsrr={0x83, 0x13, 0x30, [@loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}, @noop]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000c40)={0x738, 0x0, 0x1, 0x4070bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6f77}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff4b}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x316}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x18}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r7}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8, 0x1, r9}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x1, 0xa5, 0x1ff}, {0x2761, 0x4, 0xc2, 0x7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x738}, 0x1, 0x0, 0x0, 0x4000}, 0xdfe0cc49ff565baa) socket$isdn_base(0x22, 0x3, 0x0) [ 2405.278283] ? loop_lookup+0x190/0x190 [ 2405.278291] ? SyS_write+0x1b7/0x210 [ 2405.278303] ? loop_lookup+0x190/0x190 [ 2405.278318] do_vfs_ioctl+0x75a/0xff0 [ 2405.278331] ? lock_acquire+0x170/0x3f0 [ 2405.306689] ? ioctl_preallocate+0x1a0/0x1a0 [ 2405.306703] ? __fget+0x265/0x3e0 [ 2405.306713] ? do_vfs_ioctl+0xff0/0xff0 [ 2405.315884] ? security_file_ioctl+0x83/0xb0 [ 2405.315894] SyS_ioctl+0x7f/0xb0 [ 2405.315902] ? do_vfs_ioctl+0xff0/0xff0 [ 2405.315912] do_syscall_64+0x1d5/0x640 17:10:20 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x73, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x0, 0x0, 0x0, 0x9, 0x2, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) [ 2405.315928] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2405.315936] RIP: 0033:0x7ffa0bda9109 [ 2405.315941] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2405.315950] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2405.315955] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2405.315960] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2405.315965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 17:10:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x40000c0) 17:10:20 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0)=[{{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x1}, {0x4, 0x0, 0x1}}], 0x18) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async, rerun: 64) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x8}, 0x10) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2405.315971] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 [ 2405.371048] FAULT_INJECTION: forcing a failure. [ 2405.371048] name failslab, interval 1, probability 0, space 0, times 0 [ 2405.445629] CPU: 1 PID: 5391 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2405.474061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2405.474066] Call Trace: [ 2405.474082] dump_stack+0x1b2/0x281 [ 2405.474096] should_fail.cold+0x10a/0x149 [ 2405.474108] should_failslab+0xd6/0x130 [ 2405.474119] kmem_cache_alloc_trace+0x29a/0x3d0 17:10:20 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000080)=0x7, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=0x0, @ANYBLOB="000100004e8a9d00000000000000001400000000000041cb737763a580ff0000"]}) socket$isdn_base(0x22, 0x3, 0x0) 17:10:20 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000080)=0x7, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=0x0, @ANYBLOB="000100004e8a9d00000000000000001400000000000041cb737763a580ff0000"]}) socket$isdn_base(0x22, 0x3, 0x0) [ 2405.474133] blk_alloc_queue_stats+0x3c/0x100 [ 2405.474141] blk_alloc_queue_node+0x125/0xb40 [ 2405.474153] blk_mq_init_queue+0x42/0x90 [ 2405.474163] loop_add+0x303/0x830 [ 2405.474176] ? loop_queue_rq+0x280/0x280 [ 2405.519273] ? trace_hardirqs_on+0x10/0x10 [ 2405.519289] loop_control_ioctl+0x161/0x3f0 [ 2405.519299] ? loop_lookup+0x190/0x190 [ 2405.527581] ? SyS_write+0x1b7/0x210 [ 2405.539605] ? loop_lookup+0x190/0x190 [ 2405.543503] do_vfs_ioctl+0x75a/0xff0 [ 2405.547341] ? lock_acquire+0x170/0x3f0 17:10:20 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2db}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7461ca6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x944}, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000001c0), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000200), 0x4) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r3) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x218, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x218}, 0x1, 0x0, 0x0, 0x800}, 0x20000840) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2405.551414] ? ioctl_preallocate+0x1a0/0x1a0 [ 2405.555845] ? __fget+0x265/0x3e0 [ 2405.559404] ? do_vfs_ioctl+0xff0/0xff0 [ 2405.563391] ? security_file_ioctl+0x83/0xb0 [ 2405.567803] SyS_ioctl+0x7f/0xb0 [ 2405.571169] ? do_vfs_ioctl+0xff0/0xff0 [ 2405.575162] do_syscall_64+0x1d5/0x640 [ 2405.579077] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2405.584270] RIP: 0033:0x7ffa0bda9109 [ 2405.588154] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2405.595867] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 17:10:21 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 24) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:21 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000100)=[{{r3, r4/1000+60000}, 0x5, 0x6, 0x80000001}, {{}, 0x17, 0x1, 0x7}, {{0x77359400}, 0x0, 0x2, 0x5}], 0x48) 17:10:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x40000c0) 17:10:21 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2db}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7461ca6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x944}, 0x4) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000001c0), 0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000200), 0x4) (async) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) (async) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r3) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) (async) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x218, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x218}, 0x1, 0x0, 0x0, 0x800}, 0x20000840) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:21 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x73, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x0, 0x0, 0x0, 0x9, 0x2, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) 17:10:21 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000080)=0x7, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=0x0, @ANYBLOB="000100004e8a9d00000000000000001400000000000041cb737763a580ff0000"]}) (async) socket$isdn_base(0x22, 0x3, 0x0) [ 2405.595873] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2405.595879] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2405.595885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2405.595890] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:21 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2db}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7461ca6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x944}, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000001c0), 0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000200), 0x4) (async) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) (async) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r3) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) (async) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x218, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x218}, 0x1, 0x0, 0x0, 0x800}, 0x20000840) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2405.673130] FAULT_INJECTION: forcing a failure. [ 2405.673130] name failslab, interval 1, probability 0, space 0, times 0 [ 2405.700010] CPU: 0 PID: 5436 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2405.707847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2405.717204] Call Trace: [ 2405.719806] dump_stack+0x1b2/0x281 17:10:21 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x3, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 17:10:21 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)) (async) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x3, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 17:10:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x40000c0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x40000c0) (async) 17:10:21 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)) (async) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x3, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) [ 2405.723450] should_fail.cold+0x10a/0x149 [ 2405.727619] should_failslab+0xd6/0x130 [ 2405.731605] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2405.736726] blkg_alloc+0x92/0x5c0 [ 2405.740279] blkcg_init_queue+0x23/0x410 [ 2405.744378] blk_alloc_queue_node+0x826/0xb40 [ 2405.748890] blk_mq_init_queue+0x42/0x90 [ 2405.752975] loop_add+0x303/0x830 [ 2405.756520] ? loop_queue_rq+0x280/0x280 [ 2405.760596] ? trace_hardirqs_on+0x10/0x10 [ 2405.764879] loop_control_ioctl+0x161/0x3f0 [ 2405.769210] ? loop_lookup+0x190/0x190 17:10:21 executing program 5: semctl$SETVAL(0xffffffffffffffff, 0x3, 0x10, &(0x7f0000000000)=0x17) [ 2405.773100] ? SyS_write+0x1b7/0x210 [ 2405.776849] ? loop_lookup+0x190/0x190 [ 2405.780746] do_vfs_ioctl+0x75a/0xff0 [ 2405.784563] ? lock_acquire+0x170/0x3f0 [ 2405.788543] ? ioctl_preallocate+0x1a0/0x1a0 [ 2405.792964] ? __fget+0x265/0x3e0 [ 2405.792977] ? do_vfs_ioctl+0xff0/0xff0 [ 2405.792990] ? security_file_ioctl+0x83/0xb0 [ 2405.793000] SyS_ioctl+0x7f/0xb0 [ 2405.793006] ? do_vfs_ioctl+0xff0/0xff0 [ 2405.793018] do_syscall_64+0x1d5/0x640 [ 2405.800967] entry_SYSCALL_64_after_hwframe+0x46/0xbb 17:10:21 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 25) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 17:10:21 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000040)) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000000)='\x00') socket$isdn_base(0x22, 0x3, 0x0) 17:10:21 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x7, 0x8) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:21 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000100)=[{{r3, r4/1000+60000}, 0x5, 0x6, 0x80000001}, {{}, 0x17, 0x1, 0x7}, {{0x77359400}, 0x0, 0x2, 0x5}], 0x48) [ 2405.821701] RIP: 0033:0x7ffa0bda9109 [ 2405.825412] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2405.833118] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2405.840368] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2405.847704] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2405.854959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2405.862316] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) 17:10:21 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000040)) (async) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000000)='\x00') socket$isdn_base(0x22, 0x3, 0x0) 17:10:21 executing program 5: semctl$SETVAL(0xffffffffffffffff, 0x3, 0x10, &(0x7f0000000000)=0x17) semctl$SETVAL(0xffffffffffffffff, 0x3, 0x10, &(0x7f0000000000)=0x17) (async) 17:10:21 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000100)=[{{r3, r4/1000+60000}, 0x5, 0x6, 0x80000001}, {{}, 0x17, 0x1, 0x7}, {{0x77359400}, 0x0, 0x2, 0x5}], 0x48) [ 2405.918982] FAULT_INJECTION: forcing a failure. [ 2405.918982] name failslab, interval 1, probability 0, space 0, times 0 [ 2405.949021] CPU: 0 PID: 5468 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2405.956843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2405.956847] Call Trace: 17:10:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) 17:10:21 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000040)) (async) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000000)='\x00') (async) socket$isdn_base(0x22, 0x3, 0x0) 17:10:21 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2c0b03, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xe7087173b03f7e23}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000010a03f53daa2fa0ff75c235fe8fa29e582b9c0000000000000200000a0000070700010073797a31000000008176b37d215c245c94453941034a9fc6df752fc314d1a229ffe54bf4f578cf264cd35e846bb2cb44b34642aa2101f6e56f1f1f205e9a1836c5c527150a8d7ac30975302067ca2e67bd"], 0x20}, 0x1, 0x0, 0x0, 0x20040010}, 0x4001) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) [ 2405.956864] dump_stack+0x1b2/0x281 [ 2405.956878] should_fail.cold+0x10a/0x149 [ 2405.956893] should_failslab+0xd6/0x130 [ 2405.968915] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2405.968933] blk_throtl_init+0x7a/0x590 [ 2405.968947] blkcg_init_queue+0x18f/0x410 [ 2405.993936] blk_alloc_queue_node+0x826/0xb40 [ 2405.998455] blk_mq_init_queue+0x42/0x90 [ 2406.002553] loop_add+0x303/0x830 [ 2406.006010] ? loop_queue_rq+0x280/0x280 [ 2406.010097] ? trace_hardirqs_on+0x10/0x10 [ 2406.014343] loop_control_ioctl+0x161/0x3f0 [ 2406.018666] ? loop_lookup+0x190/0x190 [ 2406.022557] ? SyS_write+0x1b7/0x210 [ 2406.026275] ? loop_lookup+0x190/0x190 [ 2406.030162] do_vfs_ioctl+0x75a/0xff0 [ 2406.030175] ? lock_acquire+0x170/0x3f0 [ 2406.030185] ? ioctl_preallocate+0x1a0/0x1a0 [ 2406.037931] ? __fget+0x265/0x3e0 [ 2406.037944] ? do_vfs_ioctl+0xff0/0xff0 [ 2406.037956] ? security_file_ioctl+0x83/0xb0 [ 2406.054170] SyS_ioctl+0x7f/0xb0 [ 2406.057536] ? do_vfs_ioctl+0xff0/0xff0 [ 2406.061516] do_syscall_64+0x1d5/0x640 17:10:21 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 26) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:21 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2c0b03, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xe7087173b03f7e23}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000010a03f53daa2fa0ff75c235fe8fa29e582b9c0000000000000200000a0000070700010073797a31000000008176b37d215c245c94453941034a9fc6df752fc314d1a229ffe54bf4f578cf264cd35e846bb2cb44b34642aa2101f6e56f1f1f205e9a1836c5c527150a8d7ac30975302067ca2e67bd"], 0x20}, 0x1, 0x0, 0x0, 0x20040010}, 0x4001) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) 17:10:21 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x5) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2db}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7461ca6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x944}, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000001c0), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000200), 0x4) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r3) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0xffffff50}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x4}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4804}, 0x4000) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000000)={r0, 0x8}) socket$isdn_base(0x22, 0x3, 0x0) 17:10:21 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x7, 0x8) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:21 executing program 5: semctl$SETVAL(0xffffffffffffffff, 0x3, 0x10, &(0x7f0000000000)=0x17) [ 2406.065415] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2406.070614] RIP: 0033:0x7ffa0bda9109 [ 2406.074325] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2406.082046] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2406.089399] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2406.096666] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2406.104103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2406.111354] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:21 executing program 0: sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004015}, 0x8000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0xb, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8800) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xb, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x2, 0x907, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000100) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) 17:10:21 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x7, 0x8) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x7, 0x8) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) 17:10:21 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2c0b03, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xe7087173b03f7e23}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000010a03f53daa2fa0ff75c235fe8fa29e582b9c0000000000000200000a0000070700010073797a31000000008176b37d215c245c94453941034a9fc6df752fc314d1a229ffe54bf4f578cf264cd35e846bb2cb44b34642aa2101f6e56f1f1f205e9a1836c5c527150a8d7ac30975302067ca2e67bd"], 0x20}, 0x1, 0x0, 0x0, 0x20040010}, 0x4001) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) [ 2406.155426] FAULT_INJECTION: forcing a failure. [ 2406.155426] name failslab, interval 1, probability 0, space 0, times 0 [ 2406.193940] CPU: 0 PID: 5502 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 17:10:21 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) (async) r1 = socket(0x28, 0x5, 0x5) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2db}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7461ca6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x944}, 0x4) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000001c0), 0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000200), 0x4) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) (async) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r3) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0xffffff50}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x4}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4804}, 0x4000) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000000)={r0, 0x8}) (async) socket$isdn_base(0x22, 0x3, 0x0) 17:10:21 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000080)=0xbb1) [ 2406.201768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2406.211148] Call Trace: [ 2406.213745] dump_stack+0x1b2/0x281 [ 2406.217378] should_fail.cold+0x10a/0x149 [ 2406.221536] should_failslab+0xd6/0x130 [ 2406.225540] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2406.225557] throtl_pd_alloc+0x59/0x990 [ 2406.225565] ? throtl_add_bio_tg+0x1e0/0x1e0 [ 2406.225576] blkcg_activate_policy+0x115/0x5c0 [ 2406.234633] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2406.234648] blk_throtl_init+0x408/0x590 17:10:21 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) (async) r1 = socket(0x28, 0x5, 0x5) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2db}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7461ca6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x944}, 0x4) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000001c0), 0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000200), 0x4) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) (async, rerun: 64) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) (rerun: 64) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r3) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0xffffff50}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) (async, rerun: 64) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x4}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4804}, 0x4000) (async, rerun: 64) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000000)={r0, 0x8}) (async) socket$isdn_base(0x22, 0x3, 0x0) 17:10:21 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000080)=0xbb1) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000080)=0xbb1) (async) [ 2406.234659] blkcg_init_queue+0x18f/0x410 [ 2406.234669] blk_alloc_queue_node+0x826/0xb40 [ 2406.234683] blk_mq_init_queue+0x42/0x90 [ 2406.252695] loop_add+0x303/0x830 [ 2406.252707] ? loop_queue_rq+0x280/0x280 [ 2406.252719] ? trace_hardirqs_on+0x10/0x10 [ 2406.277120] loop_control_ioctl+0x161/0x3f0 [ 2406.281447] ? loop_lookup+0x190/0x190 [ 2406.285340] ? SyS_write+0x1b7/0x210 [ 2406.289057] ? loop_lookup+0x190/0x190 [ 2406.292953] do_vfs_ioctl+0x75a/0xff0 [ 2406.296768] ? lock_acquire+0x170/0x3f0 [ 2406.300759] ? ioctl_preallocate+0x1a0/0x1a0 [ 2406.305167] ? __fget+0x265/0x3e0 [ 2406.308617] ? do_vfs_ioctl+0xff0/0xff0 [ 2406.308630] ? security_file_ioctl+0x83/0xb0 [ 2406.316979] SyS_ioctl+0x7f/0xb0 [ 2406.316988] ? do_vfs_ioctl+0xff0/0xff0 [ 2406.317001] do_syscall_64+0x1d5/0x640 [ 2406.317016] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2406.328180] RIP: 0033:0x7ffa0bda9109 [ 2406.328187] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2406.328199] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 17:10:21 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 27) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:21 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000080)=0xbb1) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000080)=0xbb1) (async) 17:10:21 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) 17:10:21 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x2, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x0, 0x1, 0x1}}], 0x18) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x700, 0x7, 0x6, 0x0, {{0x11, 0x4, 0x0, 0x10, 0x44, 0x64, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0xb0, 0x3, 0x7, [{@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc}]}, @lsrr={0x83, 0xb, 0xa8, [@dev={0xac, 0x14, 0x14, 0x30}, @loopback]}, @ra={0x94, 0x4, 0x1}, @end, @noop, @timestamp={0x44, 0x4, 0xec, 0x0, 0xe}, @lsrr={0x83, 0x7, 0x83, [@dev={0xac, 0x14, 0x14, 0x25}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x700, 0x20, 0x4ba, 0x4, {{0x26, 0x4, 0x0, 0x24, 0x98, 0x7, 0x5, 0x3f, 0x4, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x1c, 0x61, 0x1, 0x6, [{@loopback, 0x4}, {@rand_addr=0x64010100, 0x100}, {@local, 0x9}]}, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0x63, [@broadcast, @loopback, @multicast2, @private=0xa010100, @private=0xa010102]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xf9, [@remote]}, @cipso={0x86, 0x40, 0xffffffffffffffff, [{0x2, 0x8, "91ee887cc583"}, {0x6, 0xe, "82b5aac51cb3f0993cfb86bc"}, {0x6, 0x11, "f8b57550e8bbadd83511d548185213"}, {0x2, 0x3, "ee"}, {0x0, 0xe, "55b787350047a2b94917700b"}, {0x0, 0x2}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f00000002c0)={0x3c0, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xdc7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8, 0x1, r4}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x4004840}, 0x44801) 17:10:21 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xfc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:21 executing program 0: sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004015}, 0x8000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0xb, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8800) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xb, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x2, 0x907, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000100) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004015}, 0x8000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0xb, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8800) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xb, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x2, 0x907, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000100) (async) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async) [ 2406.328204] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2406.328209] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2406.328216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2406.373923] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:21 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) 17:10:21 executing program 2: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) 17:10:21 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xfc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2406.447559] FAULT_INJECTION: forcing a failure. [ 2406.447559] name failslab, interval 1, probability 0, space 0, times 0 [ 2406.458987] CPU: 1 PID: 5553 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2406.466830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2406.476181] Call Trace: [ 2406.478777] dump_stack+0x1b2/0x281 [ 2406.482496] should_fail.cold+0x10a/0x149 [ 2406.486641] should_failslab+0xd6/0x130 [ 2406.490619] kmem_cache_alloc_node_trace+0x58/0x400 [ 2406.495628] throtl_pd_alloc+0x59/0x990 [ 2406.495638] ? throtl_add_bio_tg+0x1e0/0x1e0 [ 2406.495645] blkcg_activate_policy+0x23e/0x5c0 [ 2406.495661] blk_throtl_init+0x408/0x590 [ 2406.495672] blkcg_init_queue+0x18f/0x410 [ 2406.495683] blk_alloc_queue_node+0x826/0xb40 [ 2406.495694] blk_mq_init_queue+0x42/0x90 [ 2406.495703] loop_add+0x303/0x830 [ 2406.495713] ? loop_queue_rq+0x280/0x280 [ 2406.533185] ? trace_hardirqs_on+0x10/0x10 [ 2406.537408] loop_control_ioctl+0x161/0x3f0 [ 2406.541796] ? loop_lookup+0x190/0x190 [ 2406.545686] ? SyS_write+0x1b7/0x210 [ 2406.549400] ? loop_lookup+0x190/0x190 [ 2406.553284] do_vfs_ioctl+0x75a/0xff0 [ 2406.557142] ? lock_acquire+0x170/0x3f0 [ 2406.561114] ? ioctl_preallocate+0x1a0/0x1a0 [ 2406.565524] ? __fget+0x265/0x3e0 [ 2406.568970] ? do_vfs_ioctl+0xff0/0xff0 [ 2406.572945] ? security_file_ioctl+0x83/0xb0 [ 2406.577352] SyS_ioctl+0x7f/0xb0 [ 2406.580799] ? do_vfs_ioctl+0xff0/0xff0 [ 2406.584764] do_syscall_64+0x1d5/0x640 [ 2406.588641] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2406.593817] RIP: 0033:0x7ffa0bda9109 17:10:22 executing program 2: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) (async) 17:10:22 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xfc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xfc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) 17:10:22 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x2, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x0, 0x1, 0x1}}], 0x18) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x700, 0x7, 0x6, 0x0, {{0x11, 0x4, 0x0, 0x10, 0x44, 0x64, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0xb0, 0x3, 0x7, [{@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc}]}, @lsrr={0x83, 0xb, 0xa8, [@dev={0xac, 0x14, 0x14, 0x30}, @loopback]}, @ra={0x94, 0x4, 0x1}, @end, @noop, @timestamp={0x44, 0x4, 0xec, 0x0, 0xe}, @lsrr={0x83, 0x7, 0x83, [@dev={0xac, 0x14, 0x14, 0x25}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x700, 0x20, 0x4ba, 0x4, {{0x26, 0x4, 0x0, 0x24, 0x98, 0x7, 0x5, 0x3f, 0x4, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x1c, 0x61, 0x1, 0x6, [{@loopback, 0x4}, {@rand_addr=0x64010100, 0x100}, {@local, 0x9}]}, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0x63, [@broadcast, @loopback, @multicast2, @private=0xa010100, @private=0xa010102]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xf9, [@remote]}, @cipso={0x86, 0x40, 0xffffffffffffffff, [{0x2, 0x8, "91ee887cc583"}, {0x6, 0xe, "82b5aac51cb3f0993cfb86bc"}, {0x6, 0x11, "f8b57550e8bbadd83511d548185213"}, {0x2, 0x3, "ee"}, {0x0, 0xe, "55b787350047a2b94917700b"}, {0x0, 0x2}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f00000002c0)={0x3c0, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xdc7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8, 0x1, r4}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x4004840}, 0x44801) [ 2406.597508] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2406.605194] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2406.612461] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2406.619710] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2406.627002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2406.634342] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:22 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 28) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:22 executing program 0: sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004015}, 0x8000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0xb, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8800) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xb, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) (async) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x2, 0x907, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000100) (async) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) 17:10:22 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) socket$isdn_base(0x22, 0x3, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) (async) 17:10:22 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x2, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x0, 0x1, 0x1}}], 0x18) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x700, 0x7, 0x6, 0x0, {{0x11, 0x4, 0x0, 0x10, 0x44, 0x64, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0xb0, 0x3, 0x7, [{@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc}]}, @lsrr={0x83, 0xb, 0xa8, [@dev={0xac, 0x14, 0x14, 0x30}, @loopback]}, @ra={0x94, 0x4, 0x1}, @end, @noop, @timestamp={0x44, 0x4, 0xec, 0x0, 0xe}, @lsrr={0x83, 0x7, 0x83, [@dev={0xac, 0x14, 0x14, 0x25}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x700, 0x20, 0x4ba, 0x4, {{0x26, 0x4, 0x0, 0x24, 0x98, 0x7, 0x5, 0x3f, 0x4, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x1c, 0x61, 0x1, 0x6, [{@loopback, 0x4}, {@rand_addr=0x64010100, 0x100}, {@local, 0x9}]}, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0x63, [@broadcast, @loopback, @multicast2, @private=0xa010100, @private=0xa010102]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xf9, [@remote]}, @cipso={0x86, 0x40, 0xffffffffffffffff, [{0x2, 0x8, "91ee887cc583"}, {0x6, 0xe, "82b5aac51cb3f0993cfb86bc"}, {0x6, 0x11, "f8b57550e8bbadd83511d548185213"}, {0x2, 0x3, "ee"}, {0x0, 0xe, "55b787350047a2b94917700b"}, {0x0, 0x2}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f00000002c0)={0x3c0, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xdc7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8, 0x1, r4}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x4004840}, 0x44801) 17:10:22 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x94}, 0x4000000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x5}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000080)={0xf}) 17:10:22 executing program 2: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) (async) 17:10:22 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$isdn_base(r0, &(0x7f0000000280)={0x22, 0x9, 0x3, 0x14, 0x5}, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x1a8, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x809}, @CTA_TUPLE_REPLY={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TUPLE_REPLY={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}]}, @CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff1fb8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x26c}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TUPLE_REPLY={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @loopback}}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x1}, 0x34081) 17:10:22 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x94}, 0x4000000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x5}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000080)={0xf}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x94}, 0x4000000) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x5}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000080)={0xf}) (async) 17:10:22 executing program 2: sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, 0xb, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}]}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0xd, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4004010) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x200002, 0x0) timerfd_create(0x2, 0x800) perf_event_open$cgroup(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x1, 0xff, 0x9, 0x0, 0x7, 0x10000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x0, 0x7fffffffffffffff}, 0x800, 0x81, 0x1b3e, 0x0, 0x7fff, 0x8fa, 0x8001}, r0, 0x3, 0xffffffffffffffff, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x44000) 17:10:22 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) recvmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)=""/69, 0x45}, {&(0x7f0000000200)=""/187, 0xbb}, {&(0x7f00000002c0)=""/32, 0x20}], 0x3}, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080)={0x0, r0}, 0x10) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000880), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000004c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000004c0)) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, 0x0) io_submit(r1, 0x5, &(0x7f0000000840)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x5, r2, &(0x7f00000000c0)="ad7a03794feacf8bc243645a29605fce80ec2f5743f51cd180f67ed3bc03fdc874918308ba13", 0x26, 0x4, 0x0, 0x0, r3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f0000000480)="62bcc1064ad6229113f5cbb45eaec92d2c07289b488fb5f5da6270a4ee1fbfa9eb2c7538c23e11b6fe49529372447c0174aa77521bb5c4fa0b098942d9f0d7a2b06875fd7edece1896121fdc8ee0cd3460be4a9138555715a5ab699ce696640cc26b0ee2b0b01f40aa2b3c08723c52bda15de6e143b7a3eaf3edcda3d7e8e2b7a5d8aee7e4c9fc861bb611f46caabf97c30b022b28b020ca0a", 0x99, 0x10000000df99, 0x0, 0x1, r0}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x7, r4, &(0x7f0000000580)="5a3d2093e43c0a109bf95036203fe69266e71f9afbac36bbbfe9dd839f22e8cbb2e7bc83c330b6bb36b96859b0bfb922f39649ffd528e49c59fd7ef9e487cd9799392551553111cee36452173352f9378b80bfd0aad74a3409dae0f3d4fb4a84dac1ed11f08ee678fafac32c960ef1275642eb1306f09464cc4092b5", 0x7c, 0x1, 0x0, 0x2, r0}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0x9, r5, &(0x7f0000000640)="fbc26891c8e9f4262f73e1f2dfa4ce3d8bf03fec3ae65686cf6916eef005467991016b864fb3ffdb71c5b65f31bef46b5eed9faace32c910b8376a4f874c68be63974d0681f1960f1e65ef882e2a51717ecff8b7c2f743f4dc05758747b8727d785fa06d8d2282c71dd3692682d803300e817c7abb2e175bce0201f79f421c66ded3970a2657ff82e3cd95de89537e6d6bc44261e4a8aa960059560e03cf0de3ea2b8c2428aeee80bf6d57d2959675a9797ee9e42162a328", 0xb8, 0x7fff, 0x0, 0x7, r0}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x101, r0, &(0x7f0000000740)="e48bc111819b210dddd446de275c7dd4ac71e06a7470a265c66936d0c0c6ff199e5cb1fb124ef17fff0154be609c3aced88a3b5ecc9e1b871081363fc1b97ecea422dcf26297fa4319e91e3d3936046ea4a993bc68069131278b3dd1b296808945cef28c444d5ca6d710107bfd3f5ef9f0e012eeb451acc5ae1997b48a2cb313a8dcd6f79c85031c0adc3ae705d437dcda46f88ced600dd678cc5a7975cf74692454a96511dfa3652fa9d71a84bcfd9cc4e8582b8ad81475fd35f9", 0xbb, 0xc7d, 0x0, 0x1, r6}]) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 17:10:22 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) (async) r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) bind$isdn_base(r0, &(0x7f0000000280)={0x22, 0x9, 0x3, 0x14, 0x5}, 0x6) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) (async) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x1a8, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x809}, @CTA_TUPLE_REPLY={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TUPLE_REPLY={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}]}, @CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff1fb8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x26c}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TUPLE_REPLY={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @loopback}}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x1}, 0x34081) 17:10:22 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x94}, 0x4000000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x5}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000080)={0xf}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x94}, 0x4000000) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x5}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000080)={0xf}) (async) [ 2406.785623] FAULT_INJECTION: forcing a failure. [ 2406.785623] name failslab, interval 1, probability 0, space 0, times 0 [ 2406.824982] CPU: 0 PID: 5624 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2406.832810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2406.842165] Call Trace: [ 2406.844749] dump_stack+0x1b2/0x281 [ 2406.844763] should_fail.cold+0x10a/0x149 [ 2406.852515] should_failslab+0xd6/0x130 [ 2406.852528] kmem_cache_alloc_trace+0x29a/0x3d0 [ 2406.852539] ? blk_mq_can_queue+0x40/0x40 [ 2406.852546] ? queue_set_hctx_shared+0x210/0x210 [ 2406.852555] blk_stat_alloc_callback+0x54/0x2f0 [ 2406.852567] blk_mq_init_allocated_queue+0x80/0xfd0 [ 2406.852578] ? blkcg_init_queue+0x19f/0x410 [ 2406.884127] ? blk_alloc_queue_node+0x82f/0xb40 [ 2406.888799] blk_mq_init_queue+0x5a/0x90 [ 2406.892856] loop_add+0x303/0x830 [ 2406.896306] ? loop_queue_rq+0x280/0x280 [ 2406.900359] ? trace_hardirqs_on+0x10/0x10 [ 2406.904583] loop_control_ioctl+0x161/0x3f0 [ 2406.908893] ? loop_lookup+0x190/0x190 [ 2406.912758] ? SyS_write+0x1b7/0x210 [ 2406.916455] ? loop_lookup+0x190/0x190 [ 2406.920329] do_vfs_ioctl+0x75a/0xff0 [ 2406.924117] ? lock_acquire+0x170/0x3f0 [ 2406.928087] ? ioctl_preallocate+0x1a0/0x1a0 [ 2406.932499] ? __fget+0x265/0x3e0 [ 2406.935933] ? do_vfs_ioctl+0xff0/0xff0 [ 2406.940031] ? security_file_ioctl+0x83/0xb0 [ 2406.944454] SyS_ioctl+0x7f/0xb0 [ 2406.947809] ? do_vfs_ioctl+0xff0/0xff0 [ 2406.951769] do_syscall_64+0x1d5/0x640 [ 2406.955651] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2406.960831] RIP: 0033:0x7ffa0bda9109 [ 2406.964535] RSP: 002b:00007ffa0a6fd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2406.972241] RAX: ffffffffffffffda RBX: 00007ffa0bebc030 RCX: 00007ffa0bda9109 [ 2406.979503] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 17:10:22 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 29) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:22 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="56f4e8afb04f53a6521ca0e6d5214fe0b62d"], 0xa) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0x21) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000040)=0x1, 0x4) 17:10:22 executing program 2: sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, 0xb, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}]}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0xd, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4004010) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x200002, 0x0) timerfd_create(0x2, 0x800) (async) perf_event_open$cgroup(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x1, 0xff, 0x9, 0x0, 0x7, 0x10000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x0, 0x7fffffffffffffff}, 0x800, 0x81, 0x1b3e, 0x0, 0x7fff, 0x8fa, 0x8001}, r0, 0x3, 0xffffffffffffffff, 0x4) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x44000) 17:10:22 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$isdn_base(r0, &(0x7f0000000280)={0x22, 0x9, 0x3, 0x14, 0x5}, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x1a8, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x809}, @CTA_TUPLE_REPLY={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TUPLE_REPLY={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}]}, @CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff1fb8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x26c}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TUPLE_REPLY={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @loopback}}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x1}, 0x34081) socket$isdn_base(0x22, 0x3, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$isdn_base(r0, &(0x7f0000000280)={0x22, 0x9, 0x3, 0x14, 0x5}, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) (async) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x1a8, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x809}, @CTA_TUPLE_REPLY={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TUPLE_REPLY={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}]}, @CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff1fb8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x26c}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TUPLE_REPLY={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @loopback}}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x1}, 0x34081) (async) 17:10:22 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x5, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0xf}, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x2001c0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xbd, 0x3, 0xfd, 0x0, 0x0, 0x1, 0x64130, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000140)}, 0x8108, 0x0, 0x5, 0x1, 0x0, 0x9, 0x7d08, 0x0, 0x520, 0x0, 0x40}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x2) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0)) [ 2406.986751] RBP: 00007ffa0a6fd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2406.994000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2407.001247] R13: 00007ffe4a30229f R14: 00007ffa0a6fd300 R15: 0000000000022000 17:10:22 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) recvmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)=""/69, 0x45}, {&(0x7f0000000200)=""/187, 0xbb}, {&(0x7f00000002c0)=""/32, 0x20}], 0x3}, 0x0) (async, rerun: 32) io_setup(0x7, &(0x7f0000000000)=0x0) (rerun: 32) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080)={0x0, r0}, 0x10) (async, rerun: 32) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) (rerun: 32) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000880), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000004c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000004c0)) (async) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, 0x0) (async) io_submit(r1, 0x5, &(0x7f0000000840)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x5, r2, &(0x7f00000000c0)="ad7a03794feacf8bc243645a29605fce80ec2f5743f51cd180f67ed3bc03fdc874918308ba13", 0x26, 0x4, 0x0, 0x0, r3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f0000000480)="62bcc1064ad6229113f5cbb45eaec92d2c07289b488fb5f5da6270a4ee1fbfa9eb2c7538c23e11b6fe49529372447c0174aa77521bb5c4fa0b098942d9f0d7a2b06875fd7edece1896121fdc8ee0cd3460be4a9138555715a5ab699ce696640cc26b0ee2b0b01f40aa2b3c08723c52bda15de6e143b7a3eaf3edcda3d7e8e2b7a5d8aee7e4c9fc861bb611f46caabf97c30b022b28b020ca0a", 0x99, 0x10000000df99, 0x0, 0x1, r0}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x7, r4, &(0x7f0000000580)="5a3d2093e43c0a109bf95036203fe69266e71f9afbac36bbbfe9dd839f22e8cbb2e7bc83c330b6bb36b96859b0bfb922f39649ffd528e49c59fd7ef9e487cd9799392551553111cee36452173352f9378b80bfd0aad74a3409dae0f3d4fb4a84dac1ed11f08ee678fafac32c960ef1275642eb1306f09464cc4092b5", 0x7c, 0x1, 0x0, 0x2, r0}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0x9, r5, &(0x7f0000000640)="fbc26891c8e9f4262f73e1f2dfa4ce3d8bf03fec3ae65686cf6916eef005467991016b864fb3ffdb71c5b65f31bef46b5eed9faace32c910b8376a4f874c68be63974d0681f1960f1e65ef882e2a51717ecff8b7c2f743f4dc05758747b8727d785fa06d8d2282c71dd3692682d803300e817c7abb2e175bce0201f79f421c66ded3970a2657ff82e3cd95de89537e6d6bc44261e4a8aa960059560e03cf0de3ea2b8c2428aeee80bf6d57d2959675a9797ee9e42162a328", 0xb8, 0x7fff, 0x0, 0x7, r0}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x101, r0, &(0x7f0000000740)="e48bc111819b210dddd446de275c7dd4ac71e06a7470a265c66936d0c0c6ff199e5cb1fb124ef17fff0154be609c3aced88a3b5ecc9e1b871081363fc1b97ecea422dcf26297fa4319e91e3d3936046ea4a993bc68069131278b3dd1b296808945cef28c444d5ca6d710107bfd3f5ef9f0e012eeb451acc5ae1997b48a2cb313a8dcd6f79c85031c0adc3ae705d437dcda46f88ced600dd678cc5a7975cf74692454a96511dfa3652fa9d71a84bcfd9cc4e8582b8ad81475fd35f9", 0xbb, 0xc7d, 0x0, 0x1, r6}]) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 17:10:22 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8c281, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000200)=""/247) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xeb71}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x800, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40005}, 0x880) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000140)={0x55, 0x0, 0x8000, {0x8, 0x7}, {0x2, 0x40}, @rumble={0x7, 0x3}}) 17:10:22 executing program 2: sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, 0xb, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}]}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0xd, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4004010) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x200002, 0x0) timerfd_create(0x2, 0x800) perf_event_open$cgroup(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x1, 0xff, 0x9, 0x0, 0x7, 0x10000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x0, 0x7fffffffffffffff}, 0x800, 0x81, 0x1b3e, 0x0, 0x7fff, 0x8fa, 0x8001}, r0, 0x3, 0xffffffffffffffff, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x44000) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, 0xb, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}]}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) (async) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0xd, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4004010) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) timerfd_create(0x2, 0x800) (async) perf_event_open$cgroup(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x1, 0xff, 0x9, 0x0, 0x7, 0x10000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x0, 0x7fffffffffffffff}, 0x800, 0x81, 0x1b3e, 0x0, 0x7fff, 0x8fa, 0x8001}, r0, 0x3, 0xffffffffffffffff, 0x4) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x44000) (async) [ 2407.041474] FAULT_INJECTION: forcing a failure. [ 2407.041474] name failslab, interval 1, probability 0, space 0, times 0 [ 2407.068948] CPU: 0 PID: 5649 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2407.076790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2407.086154] Call Trace: 17:10:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x42, 0x3, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x0, 0x5, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x4a03, 0x0) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000140)={0x1000, 0x6, 0x5, 0x5, 0xfffffffe, 0x80000000}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000280), 0x4) openat$cgroup(r3, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x9, 0x3f, 0xc8, 0x40, 0x0, 0x78483928, 0x6900c, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffc01, 0x4, @perf_config_ext={0x1, 0x83b}, 0x10000, 0x9, 0x40001, 0x2, 0x4, 0x7, 0xfff8, 0x0, 0x2, 0x0, 0xffe}, r0, 0xa, r1, 0xc) [ 2407.088749] dump_stack+0x1b2/0x281 [ 2407.092384] should_fail.cold+0x10a/0x149 [ 2407.096544] should_failslab+0xd6/0x130 [ 2407.100523] __kmalloc+0x2c1/0x400 [ 2407.104067] ? blk_stat_alloc_callback+0x81/0x2f0 [ 2407.108913] ? blk_mq_can_queue+0x40/0x40 [ 2407.113063] ? queue_set_hctx_shared+0x210/0x210 [ 2407.117828] blk_stat_alloc_callback+0x81/0x2f0 [ 2407.122510] blk_mq_init_allocated_queue+0x80/0xfd0 [ 2407.127529] ? blkcg_init_queue+0x19f/0x410 [ 2407.127541] ? blk_alloc_queue_node+0x82f/0xb40 [ 2407.127557] blk_mq_init_queue+0x5a/0x90 17:10:22 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8c281, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000200)=""/247) (async, rerun: 32) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xeb71}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x800, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40005}, 0x880) (async, rerun: 32) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000140)={0x55, 0x0, 0x8000, {0x8, 0x7}, {0x2, 0x40}, @rumble={0x7, 0x3}}) 17:10:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x42, 0x3, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x0, 0x5, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async, rerun: 64) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async, rerun: 64) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x4a03, 0x0) (rerun: 64) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000140)={0x1000, 0x6, 0x5, 0x5, 0xfffffffe, 0x80000000}) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000280), 0x4) openat$cgroup(r3, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x9, 0x3f, 0xc8, 0x40, 0x0, 0x78483928, 0x6900c, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffc01, 0x4, @perf_config_ext={0x1, 0x83b}, 0x10000, 0x9, 0x40001, 0x2, 0x4, 0x7, 0xfff8, 0x0, 0x2, 0x0, 0xffe}, r0, 0xa, r1, 0xc) [ 2407.140600] loop_add+0x303/0x830 [ 2407.144062] ? loop_queue_rq+0x280/0x280 [ 2407.148124] ? trace_hardirqs_on+0x10/0x10 [ 2407.152366] loop_control_ioctl+0x161/0x3f0 [ 2407.156691] ? loop_lookup+0x190/0x190 [ 2407.160579] ? SyS_write+0x1b7/0x210 [ 2407.164299] ? loop_lookup+0x190/0x190 [ 2407.168190] do_vfs_ioctl+0x75a/0xff0 [ 2407.171997] ? lock_acquire+0x170/0x3f0 [ 2407.175986] ? ioctl_preallocate+0x1a0/0x1a0 [ 2407.180400] ? __fget+0x265/0x3e0 [ 2407.183857] ? do_vfs_ioctl+0xff0/0xff0 [ 2407.187837] ? security_file_ioctl+0x83/0xb0 17:10:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x42, 0x3, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x0, 0x5, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x4a03, 0x0) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000140)={0x1000, 0x6, 0x5, 0x5, 0xfffffffe, 0x80000000}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000280), 0x4) openat$cgroup(r3, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x9, 0x3f, 0xc8, 0x40, 0x0, 0x78483928, 0x6900c, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffc01, 0x4, @perf_config_ext={0x1, 0x83b}, 0x10000, 0x9, 0x40001, 0x2, 0x4, 0x7, 0xfff8, 0x0, 0x2, 0x0, 0xffe}, r0, 0xa, r1, 0xc) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x42, 0x3, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x0, 0x5, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x4a03, 0x0) (async) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000140)={0x1000, 0x6, 0x5, 0x5, 0xfffffffe, 0x80000000}) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) (async) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000280), 0x4) (async) openat$cgroup(r3, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x9, 0x3f, 0xc8, 0x40, 0x0, 0x78483928, 0x6900c, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffc01, 0x4, @perf_config_ext={0x1, 0x83b}, 0x10000, 0x9, 0x40001, 0x2, 0x4, 0x7, 0xfff8, 0x0, 0x2, 0x0, 0xffe}, r0, 0xa, r1, 0xc) (async) [ 2407.192238] SyS_ioctl+0x7f/0xb0 [ 2407.192247] ? do_vfs_ioctl+0xff0/0xff0 [ 2407.192258] do_syscall_64+0x1d5/0x640 [ 2407.192273] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2407.192283] RIP: 0033:0x7ffa0bda9109 [ 2407.212403] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2407.220118] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2407.227391] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2407.234671] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 17:10:22 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 30) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:22 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8c281, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000200)=""/247) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xeb71}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x800, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40005}, 0x880) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000140)={0x55, 0x0, 0x8000, {0x8, 0x7}, {0x2, 0x40}, @rumble={0x7, 0x3}}) socket$isdn_base(0x22, 0x3, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8c281, 0x0) (async) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000200)=""/247) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xeb71}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x800, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40005}, 0x880) (async) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000140)={0x55, 0x0, 0x8000, {0x8, 0x7}, {0x2, 0x40}, @rumble={0x7, 0x3}}) (async) 17:10:22 executing program 2: io_setup(0x7, &(0x7f0000000000)=0x0) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000004c0)) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) io_submit(r0, 0x4, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x8, r1, &(0x7f0000000080), 0x0, 0xff, 0x0, 0x3}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)="0b0bcae2948ecf04c2857f8df3f41b7a11baf05cef3c424964a36e978fa212b2d38645db", 0x24, 0x7, 0x0, 0x2, r3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, r4, &(0x7f0000000200)="7bac06b5e4018d89ca940e31361f0e428fd9130d11592943f49413ac46cba37c36a515e6c414e0a7", 0x28, 0x3, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x8, r5, &(0x7f00000002c0)="68e241798fc9a12e28bb354bd1678cedca6a8e7ec0098912405bf36d6006cd6eff97d96d94fd0087e7fcb9f3a4f3824ca677eff9795b9c66fbfcea23c467b7ee2f8ecd311a59df392aabfe2ee1d947400010310a06839f5fcb4ebb56a8199045d9090daeee973507d7c0d78b3025305662b4549a84aba56de589301a54e19fa1245e3232aaf26927386df83b0d86d2868f407addf70756efca3e18d8f2cacbf60a7deb4808809c5a2cfb0245ca3046c4f0bcdba2c9da71", 0xb7, 0x3f, 0x0, 0x2}]) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:22 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x5, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0xf}, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x2001c0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xbd, 0x3, 0xfd, 0x0, 0x0, 0x1, 0x64130, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000140)}, 0x8108, 0x0, 0x5, 0x1, 0x0, 0x9, 0x7d08, 0x0, 0x520, 0x0, 0x40}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x2) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x5, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0xf}, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x2001c0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xbd, 0x3, 0xfd, 0x0, 0x0, 0x1, 0x64130, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000140)}, 0x8108, 0x0, 0x5, 0x1, 0x0, 0x9, 0x7d08, 0x0, 0x520, 0x0, 0x40}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x2) (async) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0)) (async) 17:10:22 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="56f4e8afb04f53a6521ca0e6d5214fe0b62d"], 0xa) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0x21) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000040)=0x1, 0x4) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) write$cgroup_netprio_ifpriomap(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="56f4e8afb04f53a6521ca0e6d5214fe0b62d"], 0xa) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0x21) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) (async) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000040)=0x1, 0x4) (async) [ 2407.241956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2407.249247] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 [ 2407.293119] FAULT_INJECTION: forcing a failure. [ 2407.293119] name failslab, interval 1, probability 0, space 0, times 0 [ 2407.305269] CPU: 1 PID: 5700 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2407.313109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2407.313113] Call Trace: [ 2407.313131] dump_stack+0x1b2/0x281 [ 2407.313146] should_fail.cold+0x10a/0x149 [ 2407.313164] should_failslab+0xd6/0x130 [ 2407.313179] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2407.313192] __kmalloc_node+0x38/0x70 [ 2407.313204] blk_mq_init_allocated_queue+0x17b/0xfd0 [ 2407.313214] ? blkcg_init_queue+0x19f/0x410 [ 2407.313225] ? blk_alloc_queue_node+0x82f/0xb40 [ 2407.313238] blk_mq_init_queue+0x5a/0x90 [ 2407.313249] loop_add+0x303/0x830 [ 2407.313259] ? loop_queue_rq+0x280/0x280 [ 2407.313270] ? trace_hardirqs_on+0x10/0x10 [ 2407.313284] loop_control_ioctl+0x161/0x3f0 [ 2407.313293] ? loop_lookup+0x190/0x190 [ 2407.313301] ? SyS_write+0x1b7/0x210 [ 2407.313312] ? loop_lookup+0x190/0x190 [ 2407.313323] do_vfs_ioctl+0x75a/0xff0 [ 2407.325345] ? lock_acquire+0x170/0x3f0 [ 2407.325358] ? ioctl_preallocate+0x1a0/0x1a0 [ 2407.325372] ? __fget+0x265/0x3e0 [ 2407.407249] ? do_vfs_ioctl+0xff0/0xff0 [ 2407.411210] ? security_file_ioctl+0x83/0xb0 [ 2407.415691] SyS_ioctl+0x7f/0xb0 [ 2407.419044] ? do_vfs_ioctl+0xff0/0xff0 [ 2407.423000] do_syscall_64+0x1d5/0x640 [ 2407.426877] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2407.432132] RIP: 0033:0x7ffa0bda9109 [ 2407.435823] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2407.443517] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2407.450787] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2407.458043] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2407.465300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2407.472567] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:22 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) recvmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)=""/69, 0x45}, {&(0x7f0000000200)=""/187, 0xbb}, {&(0x7f00000002c0)=""/32, 0x20}], 0x3}, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080)={0x0, r0}, 0x10) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000880), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000004c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000004c0)) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, 0x0) io_submit(r1, 0x5, &(0x7f0000000840)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x5, r2, &(0x7f00000000c0)="ad7a03794feacf8bc243645a29605fce80ec2f5743f51cd180f67ed3bc03fdc874918308ba13", 0x26, 0x4, 0x0, 0x0, r3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f0000000480)="62bcc1064ad6229113f5cbb45eaec92d2c07289b488fb5f5da6270a4ee1fbfa9eb2c7538c23e11b6fe49529372447c0174aa77521bb5c4fa0b098942d9f0d7a2b06875fd7edece1896121fdc8ee0cd3460be4a9138555715a5ab699ce696640cc26b0ee2b0b01f40aa2b3c08723c52bda15de6e143b7a3eaf3edcda3d7e8e2b7a5d8aee7e4c9fc861bb611f46caabf97c30b022b28b020ca0a", 0x99, 0x10000000df99, 0x0, 0x1, r0}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x7, r4, &(0x7f0000000580)="5a3d2093e43c0a109bf95036203fe69266e71f9afbac36bbbfe9dd839f22e8cbb2e7bc83c330b6bb36b96859b0bfb922f39649ffd528e49c59fd7ef9e487cd9799392551553111cee36452173352f9378b80bfd0aad74a3409dae0f3d4fb4a84dac1ed11f08ee678fafac32c960ef1275642eb1306f09464cc4092b5", 0x7c, 0x1, 0x0, 0x2, r0}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0x9, r5, &(0x7f0000000640)="fbc26891c8e9f4262f73e1f2dfa4ce3d8bf03fec3ae65686cf6916eef005467991016b864fb3ffdb71c5b65f31bef46b5eed9faace32c910b8376a4f874c68be63974d0681f1960f1e65ef882e2a51717ecff8b7c2f743f4dc05758747b8727d785fa06d8d2282c71dd3692682d803300e817c7abb2e175bce0201f79f421c66ded3970a2657ff82e3cd95de89537e6d6bc44261e4a8aa960059560e03cf0de3ea2b8c2428aeee80bf6d57d2959675a9797ee9e42162a328", 0xb8, 0x7fff, 0x0, 0x7, r0}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x101, r0, &(0x7f0000000740)="e48bc111819b210dddd446de275c7dd4ac71e06a7470a265c66936d0c0c6ff199e5cb1fb124ef17fff0154be609c3aced88a3b5ecc9e1b871081363fc1b97ecea422dcf26297fa4319e91e3d3936046ea4a993bc68069131278b3dd1b296808945cef28c444d5ca6d710107bfd3f5ef9f0e012eeb451acc5ae1997b48a2cb313a8dcd6f79c85031c0adc3ae705d437dcda46f88ced600dd678cc5a7975cf74692454a96511dfa3652fa9d71a84bcfd9cc4e8582b8ad81475fd35f9", 0xbb, 0xc7d, 0x0, 0x1, r6}]) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) recvmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)=""/69, 0x45}, {&(0x7f0000000200)=""/187, 0xbb}, {&(0x7f00000002c0)=""/32, 0x20}], 0x3}, 0x0) (async) io_setup(0x7, &(0x7f0000000000)) (async) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080)={0x0, r0}, 0x10) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) (async) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000880), 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000004c0)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000004c0)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, 0x0) (async) io_submit(r1, 0x5, &(0x7f0000000840)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x5, r2, &(0x7f00000000c0)="ad7a03794feacf8bc243645a29605fce80ec2f5743f51cd180f67ed3bc03fdc874918308ba13", 0x26, 0x4, 0x0, 0x0, r3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f0000000480)="62bcc1064ad6229113f5cbb45eaec92d2c07289b488fb5f5da6270a4ee1fbfa9eb2c7538c23e11b6fe49529372447c0174aa77521bb5c4fa0b098942d9f0d7a2b06875fd7edece1896121fdc8ee0cd3460be4a9138555715a5ab699ce696640cc26b0ee2b0b01f40aa2b3c08723c52bda15de6e143b7a3eaf3edcda3d7e8e2b7a5d8aee7e4c9fc861bb611f46caabf97c30b022b28b020ca0a", 0x99, 0x10000000df99, 0x0, 0x1, r0}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x7, r4, &(0x7f0000000580)="5a3d2093e43c0a109bf95036203fe69266e71f9afbac36bbbfe9dd839f22e8cbb2e7bc83c330b6bb36b96859b0bfb922f39649ffd528e49c59fd7ef9e487cd9799392551553111cee36452173352f9378b80bfd0aad74a3409dae0f3d4fb4a84dac1ed11f08ee678fafac32c960ef1275642eb1306f09464cc4092b5", 0x7c, 0x1, 0x0, 0x2, r0}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0x9, r5, &(0x7f0000000640)="fbc26891c8e9f4262f73e1f2dfa4ce3d8bf03fec3ae65686cf6916eef005467991016b864fb3ffdb71c5b65f31bef46b5eed9faace32c910b8376a4f874c68be63974d0681f1960f1e65ef882e2a51717ecff8b7c2f743f4dc05758747b8727d785fa06d8d2282c71dd3692682d803300e817c7abb2e175bce0201f79f421c66ded3970a2657ff82e3cd95de89537e6d6bc44261e4a8aa960059560e03cf0de3ea2b8c2428aeee80bf6d57d2959675a9797ee9e42162a328", 0xb8, 0x7fff, 0x0, 0x7, r0}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x101, r0, &(0x7f0000000740)="e48bc111819b210dddd446de275c7dd4ac71e06a7470a265c66936d0c0c6ff199e5cb1fb124ef17fff0154be609c3aced88a3b5ecc9e1b871081363fc1b97ecea422dcf26297fa4319e91e3d3936046ea4a993bc68069131278b3dd1b296808945cef28c444d5ca6d710107bfd3f5ef9f0e012eeb451acc5ae1997b48a2cb313a8dcd6f79c85031c0adc3ae705d437dcda46f88ced600dd678cc5a7975cf74692454a96511dfa3652fa9d71a84bcfd9cc4e8582b8ad81475fd35f9", 0xbb, 0xc7d, 0x0, 0x1, r6}]) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_netfilter(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (async) 17:10:22 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) 17:10:22 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x5, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0xf}, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x2001c0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xbd, 0x3, 0xfd, 0x0, 0x0, 0x1, 0x64130, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000140)}, 0x8108, 0x0, 0x5, 0x1, 0x0, 0x9, 0x7d08, 0x0, 0x520, 0x0, 0x40}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x2) (async) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0)) 17:10:22 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) write$cgroup_netprio_ifpriomap(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="56f4e8afb04f53a6521ca0e6d5214fe0b62d"], 0xa) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0x21) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000040)=0x1, 0x4) 17:10:22 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 31) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:22 executing program 2: io_setup(0x7, &(0x7f0000000000)=0x0) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000004c0)) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) io_submit(r0, 0x4, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x8, r1, &(0x7f0000000080), 0x0, 0xff, 0x0, 0x3}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)="0b0bcae2948ecf04c2857f8df3f41b7a11baf05cef3c424964a36e978fa212b2d38645db", 0x24, 0x7, 0x0, 0x2, r3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, r4, &(0x7f0000000200)="7bac06b5e4018d89ca940e31361f0e428fd9130d11592943f49413ac46cba37c36a515e6c414e0a7", 0x28, 0x3, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x8, r5, &(0x7f00000002c0)="68e241798fc9a12e28bb354bd1678cedca6a8e7ec0098912405bf36d6006cd6eff97d96d94fd0087e7fcb9f3a4f3824ca677eff9795b9c66fbfcea23c467b7ee2f8ecd311a59df392aabfe2ee1d947400010310a06839f5fcb4ebb56a8199045d9090daeee973507d7c0d78b3025305662b4549a84aba56de589301a54e19fa1245e3232aaf26927386df83b0d86d2868f407addf70756efca3e18d8f2cacbf60a7deb4808809c5a2cfb0245ca3046c4f0bcdba2c9da71", 0xb7, 0x3f, 0x0, 0x2}]) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000000000)) (async) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000004c0)) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) (async) io_submit(r0, 0x4, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x8, r1, &(0x7f0000000080), 0x0, 0xff, 0x0, 0x3}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)="0b0bcae2948ecf04c2857f8df3f41b7a11baf05cef3c424964a36e978fa212b2d38645db", 0x24, 0x7, 0x0, 0x2, r3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, r4, &(0x7f0000000200)="7bac06b5e4018d89ca940e31361f0e428fd9130d11592943f49413ac46cba37c36a515e6c414e0a7", 0x28, 0x3, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x8, r5, &(0x7f00000002c0)="68e241798fc9a12e28bb354bd1678cedca6a8e7ec0098912405bf36d6006cd6eff97d96d94fd0087e7fcb9f3a4f3824ca677eff9795b9c66fbfcea23c467b7ee2f8ecd311a59df392aabfe2ee1d947400010310a06839f5fcb4ebb56a8199045d9090daeee973507d7c0d78b3025305662b4549a84aba56de589301a54e19fa1245e3232aaf26927386df83b0d86d2868f407addf70756efca3e18d8f2cacbf60a7deb4808809c5a2cfb0245ca3046c4f0bcdba2c9da71", 0xb7, 0x3f, 0x0, 0x2}]) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) 17:10:22 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) [ 2407.560464] FAULT_INJECTION: forcing a failure. [ 2407.560464] name failslab, interval 1, probability 0, space 0, times 0 [ 2407.572736] CPU: 1 PID: 5727 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2407.580561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2407.590003] Call Trace: [ 2407.590038] dump_stack+0x1b2/0x281 [ 2407.590051] should_fail.cold+0x10a/0x149 [ 2407.600403] should_failslab+0xd6/0x130 [ 2407.604393] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2407.609505] __kmalloc_node+0x38/0x70 [ 2407.613312] blk_mq_realloc_hw_ctxs+0x1a5/0xe00 [ 2407.618000] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2407.623027] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 2407.628324] blk_mq_init_allocated_queue+0x20c/0xfd0 [ 2407.633440] ? blkcg_init_queue+0x19f/0x410 [ 2407.637776] ? blk_alloc_queue_node+0x82f/0xb40 [ 2407.642885] blk_mq_init_queue+0x5a/0x90 [ 2407.646964] loop_add+0x303/0x830 [ 2407.650427] ? loop_queue_rq+0x280/0x280 [ 2407.654497] ? trace_hardirqs_on+0x10/0x10 17:10:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0xb, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:22 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) 17:10:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0xb, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0xb, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:23 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) socket$isdn_base(0x22, 0x3, 0x0) [ 2407.658747] loop_control_ioctl+0x161/0x3f0 [ 2407.663078] ? loop_lookup+0x190/0x190 [ 2407.666962] ? SyS_write+0x1b7/0x210 [ 2407.666977] ? loop_lookup+0x190/0x190 [ 2407.666991] do_vfs_ioctl+0x75a/0xff0 [ 2407.678376] ? lock_acquire+0x170/0x3f0 [ 2407.682464] ? ioctl_preallocate+0x1a0/0x1a0 [ 2407.686886] ? __fget+0x265/0x3e0 [ 2407.690351] ? do_vfs_ioctl+0xff0/0xff0 [ 2407.694340] ? security_file_ioctl+0x83/0xb0 [ 2407.698757] SyS_ioctl+0x7f/0xb0 [ 2407.702122] ? do_vfs_ioctl+0xff0/0xff0 [ 2407.702135] do_syscall_64+0x1d5/0x640 [ 2407.702150] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2407.702157] RIP: 0033:0x7ffa0bda9109 [ 2407.702162] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2407.702171] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2407.702175] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2407.702180] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2407.702185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2407.702190] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x2, 0x3, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xc}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x29}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0xf}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x4) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="149f0000000a0a010400000000ffffff0f010000003a87456dd13640868ff3d7d3e90ddc1baf66e0e0f0f7777db06f6cf00b3e385e157063bbc41a0ebb3967c1c47320232ff9ce6f330fe25c9362f14ccc93354f05e447281bb0ff3b6839229d638744a8a29a42894ca45ac1c30027a4d8c8e505136e453ff0c593827049a8fe"], 0x14}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000240), 0x8, 0x400002) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000280)=""/212) 17:10:23 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 32) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:23 executing program 5: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000080)=""/126) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:23 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) (async) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) 17:10:23 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000000)=""/44) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0x21) 17:10:23 executing program 2: io_setup(0x7, &(0x7f0000000000)=0x0) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000004c0)) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) io_submit(r0, 0x4, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x8, r1, &(0x7f0000000080), 0x0, 0xff, 0x0, 0x3}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)="0b0bcae2948ecf04c2857f8df3f41b7a11baf05cef3c424964a36e978fa212b2d38645db", 0x24, 0x7, 0x0, 0x2, r3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, r4, &(0x7f0000000200)="7bac06b5e4018d89ca940e31361f0e428fd9130d11592943f49413ac46cba37c36a515e6c414e0a7", 0x28, 0x3, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x8, r5, &(0x7f00000002c0)="68e241798fc9a12e28bb354bd1678cedca6a8e7ec0098912405bf36d6006cd6eff97d96d94fd0087e7fcb9f3a4f3824ca677eff9795b9c66fbfcea23c467b7ee2f8ecd311a59df392aabfe2ee1d947400010310a06839f5fcb4ebb56a8199045d9090daeee973507d7c0d78b3025305662b4549a84aba56de589301a54e19fa1245e3232aaf26927386df83b0d86d2868f407addf70756efca3e18d8f2cacbf60a7deb4808809c5a2cfb0245ca3046c4f0bcdba2c9da71", 0xb7, 0x3f, 0x0, 0x2}]) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000000000)) (async) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000004c0)) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) (async) io_submit(r0, 0x4, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x8, r1, &(0x7f0000000080), 0x0, 0xff, 0x0, 0x3}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)="0b0bcae2948ecf04c2857f8df3f41b7a11baf05cef3c424964a36e978fa212b2d38645db", 0x24, 0x7, 0x0, 0x2, r3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, r4, &(0x7f0000000200)="7bac06b5e4018d89ca940e31361f0e428fd9130d11592943f49413ac46cba37c36a515e6c414e0a7", 0x28, 0x3, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x8, r5, &(0x7f00000002c0)="68e241798fc9a12e28bb354bd1678cedca6a8e7ec0098912405bf36d6006cd6eff97d96d94fd0087e7fcb9f3a4f3824ca677eff9795b9c66fbfcea23c467b7ee2f8ecd311a59df392aabfe2ee1d947400010310a06839f5fcb4ebb56a8199045d9090daeee973507d7c0d78b3025305662b4549a84aba56de589301a54e19fa1245e3232aaf26927386df83b0d86d2868f407addf70756efca3e18d8f2cacbf60a7deb4808809c5a2cfb0245ca3046c4f0bcdba2c9da71", 0xb7, 0x3f, 0x0, 0x2}]) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) 17:10:23 executing program 5: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000080)=""/126) (async, rerun: 64) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 64) 17:10:23 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) (async) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) 17:10:23 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000000)=""/44) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0x21) 17:10:23 executing program 5: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000080)=""/126) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2407.865188] FAULT_INJECTION: forcing a failure. [ 2407.865188] name failslab, interval 1, probability 0, space 0, times 0 [ 2407.895254] CPU: 0 PID: 5781 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2407.903081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2407.912601] Call Trace: 17:10:23 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x1, 0x3, 0x80, 0x7, 0x0, 0x6, 0x2801, 0x7, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x480, 0x0, 0x1, 0x1, 0x15c, 0xff, 0x2, 0x0, 0x200, 0x0, 0x3}, 0xffffffffffffffff, 0xe, r0, 0x0) [ 2407.912617] dump_stack+0x1b2/0x281 [ 2407.912630] should_fail.cold+0x10a/0x149 [ 2407.912642] should_failslab+0xd6/0x130 [ 2407.926953] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2407.932062] __kmalloc_node+0x38/0x70 [ 2407.932077] blk_mq_realloc_hw_ctxs+0x528/0xe00 [ 2407.932093] blk_mq_init_allocated_queue+0x20c/0xfd0 [ 2407.932103] ? blkcg_init_queue+0x19f/0x410 [ 2407.932114] ? blk_alloc_queue_node+0x82f/0xb40 [ 2407.940574] blk_mq_init_queue+0x5a/0x90 [ 2407.940586] loop_add+0x303/0x830 17:10:23 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x1, 0x3, 0x80, 0x7, 0x0, 0x6, 0x2801, 0x7, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x480, 0x0, 0x1, 0x1, 0x15c, 0xff, 0x2, 0x0, 0x200, 0x0, 0x3}, 0xffffffffffffffff, 0xe, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x1, 0x3, 0x80, 0x7, 0x0, 0x6, 0x2801, 0x7, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x480, 0x0, 0x1, 0x1, 0x15c, 0xff, 0x2, 0x0, 0x200, 0x0, 0x3}, 0xffffffffffffffff, 0xe, r0, 0x0) (async) [ 2407.940597] ? loop_queue_rq+0x280/0x280 [ 2407.958726] ? trace_hardirqs_on+0x10/0x10 [ 2407.958743] loop_control_ioctl+0x161/0x3f0 [ 2407.958752] ? loop_lookup+0x190/0x190 [ 2407.958769] ? SyS_write+0x1b7/0x210 [ 2407.982375] ? loop_lookup+0x190/0x190 [ 2407.986277] do_vfs_ioctl+0x75a/0xff0 [ 2407.990085] ? lock_acquire+0x170/0x3f0 [ 2407.994071] ? ioctl_preallocate+0x1a0/0x1a0 [ 2407.998597] ? __fget+0x265/0x3e0 [ 2408.002059] ? do_vfs_ioctl+0xff0/0xff0 [ 2408.006024] ? security_file_ioctl+0x83/0xb0 [ 2408.010414] SyS_ioctl+0x7f/0xb0 [ 2408.013764] ? do_vfs_ioctl+0xff0/0xff0 [ 2408.017721] do_syscall_64+0x1d5/0x640 [ 2408.021596] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2408.026772] RIP: 0033:0x7ffa0bda9109 [ 2408.030461] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2408.038149] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2408.045406] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2408.052657] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2408.059906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2408.067354] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:23 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=@raw=[@generic={0x40, 0x0, 0x3, 0x0, 0xffff}, @generic={0x49, 0x9, 0x7, 0x5, 0x8}, @alu={0x3, 0x1, 0xa, 0x0, 0xa, 0xffffffffffffffc0, 0xfffffffffffffff0}], &(0x7f00000000c0)='GPL\x00', 0x8, 0x75, &(0x7f0000000100)=""/117, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xb, 0x3, 0x8}, 0x10}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, 0x0, 0x25, 0x10}, 0x10) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x599729af}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{@fixed}, {@none}]}) 17:10:23 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x1, 0x3, 0x80, 0x7, 0x0, 0x6, 0x2801, 0x7, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x480, 0x0, 0x1, 0x1, 0x15c, 0xff, 0x2, 0x0, 0x200, 0x0, 0x3}, 0xffffffffffffffff, 0xe, r0, 0x0) 17:10:23 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async, rerun: 32) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000000)=""/44) (rerun: 32) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0x21) 17:10:23 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x405180, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) socket$isdn_base(0x22, 0x3, 0x0) 17:10:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x2, 0x3, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xc}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x29}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0xf}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x4) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="149f0000000a0a010400000000ffffff0f010000003a87456dd13640868ff3d7d3e90ddc1baf66e0e0f0f7777db06f6cf00b3e385e157063bbc41a0ebb3967c1c47320232ff9ce6f330fe25c9362f14ccc93354f05e447281bb0ff3b6839229d638744a8a29a42894ca45ac1c30027a4d8c8e505136e453ff0c593827049a8fe"], 0x14}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000240), 0x8, 0x400002) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000280)=""/212) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x2, 0x3, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xc}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x29}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0xf}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x4) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="149f0000000a0a010400000000ffffff0f010000003a87456dd13640868ff3d7d3e90ddc1baf66e0e0f0f7777db06f6cf00b3e385e157063bbc41a0ebb3967c1c47320232ff9ce6f330fe25c9362f14ccc93354f05e447281bb0ff3b6839229d638744a8a29a42894ca45ac1c30027a4d8c8e505136e453ff0c593827049a8fe"], 0x14}}, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000240), 0x8, 0x400002) (async) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000280)=""/212) (async) 17:10:23 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 33) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:23 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x405180, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x405180, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) 17:10:23 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=@raw=[@generic={0x40, 0x0, 0x3, 0x0, 0xffff}, @generic={0x49, 0x9, 0x7, 0x5, 0x8}, @alu={0x3, 0x1, 0xa, 0x0, 0xa, 0xffffffffffffffc0, 0xfffffffffffffff0}], &(0x7f00000000c0)='GPL\x00', 0x8, 0x75, &(0x7f0000000100)=""/117, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xb, 0x3, 0x8}, 0x10}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, 0x0, 0x25, 0x10}, 0x10) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x599729af}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{@fixed}, {@none}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=@raw=[@generic={0x40, 0x0, 0x3, 0x0, 0xffff}, @generic={0x49, 0x9, 0x7, 0x5, 0x8}, @alu={0x3, 0x1, 0xa, 0x0, 0xa, 0xffffffffffffffc0, 0xfffffffffffffff0}], &(0x7f00000000c0)='GPL\x00', 0x8, 0x75, &(0x7f0000000100)=""/117, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xb, 0x3, 0x8}, 0x10}, 0x80) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, 0x0, 0x25, 0x10}, 0x10) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x599729af}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{@fixed}, {@none}]}) (async) 17:10:23 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) 17:10:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x2, 0x3, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xc}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x29}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0xf}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x4) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="149f0000000a0a010400000000ffffff0f010000003a87456dd13640868ff3d7d3e90ddc1baf66e0e0f0f7777db06f6cf00b3e385e157063bbc41a0ebb3967c1c47320232ff9ce6f330fe25c9362f14ccc93354f05e447281bb0ff3b6839229d638744a8a29a42894ca45ac1c30027a4d8c8e505136e453ff0c593827049a8fe"], 0x14}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000240), 0x8, 0x400002) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000280)=""/212) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x2, 0x3, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xc}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x29}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0xf}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x4) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="149f0000000a0a010400000000ffffff0f010000003a87456dd13640868ff3d7d3e90ddc1baf66e0e0f0f7777db06f6cf00b3e385e157063bbc41a0ebb3967c1c47320232ff9ce6f330fe25c9362f14ccc93354f05e447281bb0ff3b6839229d638744a8a29a42894ca45ac1c30027a4d8c8e505136e453ff0c593827049a8fe"], 0x14}}, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000240), 0x8, 0x400002) (async) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000280)=""/212) (async) 17:10:23 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40c80, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) [ 2408.192065] FAULT_INJECTION: forcing a failure. [ 2408.192065] name failslab, interval 1, probability 0, space 0, times 0 [ 2408.209857] CPU: 0 PID: 5834 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2408.217766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2408.227120] Call Trace: [ 2408.229711] dump_stack+0x1b2/0x281 [ 2408.233346] should_fail.cold+0x10a/0x149 [ 2408.237497] should_failslab+0xd6/0x130 17:10:23 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40c80, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) 17:10:23 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40c80, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) 17:10:23 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=@raw=[@generic={0x40, 0x0, 0x3, 0x0, 0xffff}, @generic={0x49, 0x9, 0x7, 0x5, 0x8}, @alu={0x3, 0x1, 0xa, 0x0, 0xa, 0xffffffffffffffc0, 0xfffffffffffffff0}], &(0x7f00000000c0)='GPL\x00', 0x8, 0x75, &(0x7f0000000100)=""/117, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xb, 0x3, 0x8}, 0x10}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, 0x0, 0x25, 0x10}, 0x10) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x599729af}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{@fixed}, {@none}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=@raw=[@generic={0x40, 0x0, 0x3, 0x0, 0xffff}, @generic={0x49, 0x9, 0x7, 0x5, 0x8}, @alu={0x3, 0x1, 0xa, 0x0, 0xa, 0xffffffffffffffc0, 0xfffffffffffffff0}], &(0x7f00000000c0)='GPL\x00', 0x8, 0x75, &(0x7f0000000100)=""/117, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xb, 0x3, 0x8}, 0x10}, 0x80) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, 0x0, 0x25, 0x10}, 0x10) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x599729af}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{@fixed}, {@none}]}) (async) [ 2408.241476] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2408.246592] __kmalloc_node+0x38/0x70 [ 2408.250459] sbitmap_init_node+0x10c/0x3d0 [ 2408.254704] blk_mq_realloc_hw_ctxs+0x59b/0xe00 [ 2408.259486] blk_mq_init_allocated_queue+0x20c/0xfd0 [ 2408.264695] ? blkcg_init_queue+0x19f/0x410 [ 2408.269027] ? blk_alloc_queue_node+0x82f/0xb40 [ 2408.273709] blk_mq_init_queue+0x5a/0x90 [ 2408.277773] loop_add+0x303/0x830 [ 2408.281233] ? loop_queue_rq+0x280/0x280 [ 2408.285299] ? trace_hardirqs_on+0x10/0x10 17:10:23 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4700, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:23 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4700, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040)) (async) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140700000a0a0104000000000000000001000000"], 0x14}}, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000080)={'\x00', 0x1, 0x0, 0x97}) [ 2408.289549] loop_control_ioctl+0x161/0x3f0 [ 2408.293891] ? loop_lookup+0x190/0x190 [ 2408.297785] ? SyS_write+0x1b7/0x210 [ 2408.301510] ? loop_lookup+0x190/0x190 [ 2408.305406] do_vfs_ioctl+0x75a/0xff0 [ 2408.309214] ? lock_acquire+0x170/0x3f0 [ 2408.313190] ? ioctl_preallocate+0x1a0/0x1a0 [ 2408.317606] ? __fget+0x265/0x3e0 [ 2408.321061] ? do_vfs_ioctl+0xff0/0xff0 [ 2408.325037] ? security_file_ioctl+0x83/0xb0 [ 2408.329446] SyS_ioctl+0x7f/0xb0 [ 2408.332805] ? do_vfs_ioctl+0xff0/0xff0 [ 2408.336780] do_syscall_64+0x1d5/0x640 [ 2408.340671] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2408.346023] RIP: 0033:0x7ffa0bda9109 [ 2408.349743] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2408.357492] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2408.364760] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2408.372100] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2408.379484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 17:10:23 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 34) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140700000a0a0104000000000000000001000000"], 0x14}}, 0x0) (async, rerun: 32) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000080)={'\x00', 0x1, 0x0, 0x97}) 17:10:23 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) recvmsg$can_raw(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000040)=""/107, 0x6b}, {&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/61, 0x3d}, {&(0x7f0000001100)=""/5, 0x5}, {&(0x7f0000001140)=""/5, 0x5}], 0x5, &(0x7f0000001200)=""/22, 0x16}, 0x40) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001280), 0x163040, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000012c0), &(0x7f0000001300)=0x4) 17:10:23 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) 17:10:23 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x405180, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x405180, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) 17:10:23 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4700, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040)) (async, rerun: 64) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 64) [ 2408.386743] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:23 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) 17:10:23 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) (async, rerun: 32) recvmsg$can_raw(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000040)=""/107, 0x6b}, {&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/61, 0x3d}, {&(0x7f0000001100)=""/5, 0x5}, {&(0x7f0000001140)=""/5, 0x5}], 0x5, &(0x7f0000001200)=""/22, 0x16}, 0x40) (async, rerun: 32) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001280), 0x163040, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000012c0), &(0x7f0000001300)=0x4) 17:10:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140700000a0a0104000000000000000001000000"], 0x14}}, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000080)={'\x00', 0x1, 0x0, 0x97}) 17:10:23 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 17:10:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x80, 0x9, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xac1}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004819}, 0x800) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 17:10:23 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) [ 2408.483644] FAULT_INJECTION: forcing a failure. [ 2408.483644] name failslab, interval 1, probability 0, space 0, times 0 [ 2408.526604] CPU: 1 PID: 5897 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2408.534430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2408.543781] Call Trace: [ 2408.543799] dump_stack+0x1b2/0x281 [ 2408.543813] should_fail.cold+0x10a/0x149 [ 2408.543826] should_failslab+0xd6/0x130 [ 2408.543838] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2408.543851] blk_alloc_flush_queue+0x4f/0x2b0 [ 2408.543863] blk_mq_realloc_hw_ctxs+0x6ab/0xe00 [ 2408.543883] blk_mq_init_allocated_queue+0x20c/0xfd0 [ 2408.543892] ? blkcg_init_queue+0x19f/0x410 [ 2408.543902] ? blk_alloc_queue_node+0x82f/0xb40 [ 2408.587276] blk_mq_init_queue+0x5a/0x90 [ 2408.591322] loop_add+0x303/0x830 [ 2408.594776] ? loop_queue_rq+0x280/0x280 [ 2408.598830] ? trace_hardirqs_on+0x10/0x10 [ 2408.603077] loop_control_ioctl+0x161/0x3f0 [ 2408.607405] ? loop_lookup+0x190/0x190 [ 2408.611552] ? SyS_write+0x1b7/0x210 [ 2408.615285] ? loop_lookup+0x190/0x190 [ 2408.619157] do_vfs_ioctl+0x75a/0xff0 [ 2408.622953] ? lock_acquire+0x170/0x3f0 [ 2408.626915] ? ioctl_preallocate+0x1a0/0x1a0 [ 2408.631333] ? __fget+0x265/0x3e0 [ 2408.634766] ? do_vfs_ioctl+0xff0/0xff0 [ 2408.638725] ? security_file_ioctl+0x83/0xb0 [ 2408.643638] SyS_ioctl+0x7f/0xb0 [ 2408.646989] ? do_vfs_ioctl+0xff0/0xff0 [ 2408.650941] do_syscall_64+0x1d5/0x640 [ 2408.654813] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2408.659979] RIP: 0033:0x7ffa0bda9109 [ 2408.663762] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:10:24 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 35) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:24 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7bf7fef4bcb3a65b, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6b40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:24 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) (rerun: 32) recvmsg$can_raw(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000040)=""/107, 0x6b}, {&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/61, 0x3d}, {&(0x7f0000001100)=""/5, 0x5}, {&(0x7f0000001140)=""/5, 0x5}], 0x5, &(0x7f0000001200)=""/22, 0x16}, 0x40) (async, rerun: 32) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001280), 0x163040, 0x0) (rerun: 32) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000012c0), &(0x7f0000001300)=0x4) 17:10:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x80, 0x9, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xac1}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004819}, 0x800) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x80, 0x9, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xac1}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004819}, 0x800) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (async) 17:10:24 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x168140, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000000c0)=""/100) 17:10:24 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) [ 2408.671463] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2408.678713] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2408.685959] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2408.693204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2408.700455] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:24 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7bf7fef4bcb3a65b, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6b40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:24 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000040)) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000000)={0x7}) 17:10:24 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000)=0x1, 0x4) 17:10:24 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x168140, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000000c0)=""/100) 17:10:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x80, 0x9, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xac1}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004819}, 0x800) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 17:10:24 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7bf7fef4bcb3a65b, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6b40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2408.772815] FAULT_INJECTION: forcing a failure. [ 2408.772815] name failslab, interval 1, probability 0, space 0, times 0 [ 2408.817295] CPU: 0 PID: 5928 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2408.825119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2408.834471] Call Trace: [ 2408.837064] dump_stack+0x1b2/0x281 [ 2408.840731] should_fail.cold+0x10a/0x149 [ 2408.844892] should_failslab+0xd6/0x130 [ 2408.848891] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2408.854011] __kmalloc_node+0x38/0x70 [ 2408.857820] blk_alloc_flush_queue+0xf7/0x2b0 [ 2408.862326] blk_mq_realloc_hw_ctxs+0x6ab/0xe00 [ 2408.867015] blk_mq_init_allocated_queue+0x20c/0xfd0 [ 2408.872123] ? blkcg_init_queue+0x19f/0x410 [ 2408.876450] ? blk_alloc_queue_node+0x82f/0xb40 [ 2408.881122] blk_mq_init_queue+0x5a/0x90 [ 2408.885185] loop_add+0x303/0x830 [ 2408.888635] ? loop_queue_rq+0x280/0x280 [ 2408.892697] ? trace_hardirqs_on+0x10/0x10 [ 2408.896937] loop_control_ioctl+0x161/0x3f0 [ 2408.901281] ? loop_lookup+0x190/0x190 [ 2408.905163] ? SyS_write+0x1b7/0x210 [ 2408.908946] ? loop_lookup+0x190/0x190 [ 2408.912854] do_vfs_ioctl+0x75a/0xff0 [ 2408.916635] ? lock_acquire+0x170/0x3f0 [ 2408.920606] ? ioctl_preallocate+0x1a0/0x1a0 [ 2408.924994] ? __fget+0x265/0x3e0 [ 2408.928472] ? do_vfs_ioctl+0xff0/0xff0 [ 2408.932428] ? security_file_ioctl+0x83/0xb0 [ 2408.936815] SyS_ioctl+0x7f/0xb0 [ 2408.940180] ? do_vfs_ioctl+0xff0/0xff0 [ 2408.944146] do_syscall_64+0x1d5/0x640 [ 2408.948020] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2408.953188] RIP: 0033:0x7ffa0bda9109 [ 2408.956875] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:10:24 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 36) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:24 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000001540)={0x55c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6466}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff37c}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x55c}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000840)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2db}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7461ca6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x944}, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000001c0), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000200), 0x4) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r3) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x23}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000002200)={0xcc0, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x0, 0x6}, {0x0, 0x80, 0x9, 0x5}, {0x0, 0x80, 0x3, 0x1f}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x3, 0x5c}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8733, 0x80, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x5}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x7, 0x401}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5aa}}}]}}]}, 0xcc0}, 0x1, 0x0, 0x0, 0x20011}, 0xef3ade1d79df4c5e) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf0, 0xa, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0xc4, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xbbe}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'wg2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x82}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xffffffa2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x40080) 17:10:24 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000)=0x1, 0x4) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000)=0x1, 0x4) (async) 17:10:24 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x168140, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000000c0)=""/100) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x168140, 0x0) (async) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000000c0)=""/100) (async) 17:10:24 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000040)) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000000)={0x7}) socket$isdn_base(0x22, 0x3, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000040)) (async) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000000)={0x7}) (async) 17:10:24 executing program 0: ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000080)={0x52, &(0x7f0000000040)}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) [ 2408.964563] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2408.971819] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2408.979068] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2408.986319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2408.993577] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:24 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000001540)={0x55c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6466}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff37c}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x55c}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000840)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2db}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7461ca6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x944}, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000001c0), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000200), 0x4) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r3) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x23}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000002200)={0xcc0, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x0, 0x6}, {0x0, 0x80, 0x9, 0x5}, {0x0, 0x80, 0x3, 0x1f}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x3, 0x5c}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8733, 0x80, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x5}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x7, 0x401}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5aa}}}]}}]}, 0xcc0}, 0x1, 0x0, 0x0, 0x20011}, 0xef3ade1d79df4c5e) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf0, 0xa, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0xc4, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xbbe}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'wg2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x82}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xffffffa2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x40080) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000001540)={0x55c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6466}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff37c}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x55c}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000840)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2db}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7461ca6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x944}, 0x4) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000001c0), 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000200), 0x4) (async) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) (async) syz_genetlink_get_family_id$team(&(0x7f0000000480), r3) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x23}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000002200)={0xcc0, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x0, 0x6}, {0x0, 0x80, 0x9, 0x5}, {0x0, 0x80, 0x3, 0x1f}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x3, 0x5c}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8733, 0x80, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x5}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x7, 0x401}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5aa}}}]}}]}, 0xcc0}, 0x1, 0x0, 0x0, 0x20011}, 0xef3ade1d79df4c5e) (async) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf0, 0xa, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0xc4, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xbbe}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'wg2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x82}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xffffffa2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x40080) (async) 17:10:24 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000)=0x1, 0x4) 17:10:24 executing program 0: ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000080)={0x52, &(0x7f0000000040)}) (async, rerun: 32) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 17:10:24 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000040)) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000000)={0x7}) socket$isdn_base(0x22, 0x3, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000040)) (async) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000000)={0x7}) (async) [ 2409.066799] FAULT_INJECTION: forcing a failure. [ 2409.066799] name failslab, interval 1, probability 0, space 0, times 0 [ 2409.088378] CPU: 0 PID: 5956 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2409.096219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2409.105756] Call Trace: [ 2409.108347] dump_stack+0x1b2/0x281 [ 2409.111982] should_fail.cold+0x10a/0x149 17:10:24 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0) sendmsg$can_raw(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x3, 0x0, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "920cff7b9cf31b48"}, 0x10}, 0x1, 0x0, 0x0, 0x90}, 0x800) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x4, 0x1, 0x1}, {0x3, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x1, 0x1}}, {{0x0, 0x1}, {0x2, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x2}}], 0x18) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/23, 0x17) 17:10:24 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0) sendmsg$can_raw(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x3, 0x0, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "920cff7b9cf31b48"}, 0x10}, 0x1, 0x0, 0x0, 0x90}, 0x800) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x4, 0x1, 0x1}, {0x3, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x1, 0x1}}, {{0x0, 0x1}, {0x2, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x2}}], 0x18) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/23, 0x17) socket$can_raw(0x1d, 0x3, 0x1) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0) (async) sendmsg$can_raw(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x3, 0x0, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "920cff7b9cf31b48"}, 0x10}, 0x1, 0x0, 0x0, 0x90}, 0x800) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x4, 0x1, 0x1}, {0x3, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x1, 0x1}}], 0x10) (async) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x1, 0x1}}, {{0x0, 0x1}, {0x2, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x2}}], 0x18) (async) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/23, 0x17) (async) [ 2409.116141] should_failslab+0xd6/0x130 [ 2409.120137] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2409.125344] blk_mq_init_tags+0x5e/0x280 [ 2409.129418] blk_mq_alloc_rq_map+0x90/0x220 [ 2409.133836] blk_mq_sched_alloc_tags+0xaa/0x240 [ 2409.138514] blk_mq_init_sched+0x18d/0x4a0 [ 2409.142789] ? _raw_spin_unlock+0x29/0x40 [ 2409.146981] elevator_init+0x2ee/0x410 [ 2409.151053] blk_mq_sched_init+0x28/0x40 [ 2409.155132] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 2409.160254] blk_mq_init_queue+0x5a/0x90 [ 2409.164344] loop_add+0x303/0x830 [ 2409.167809] ? loop_queue_rq+0x280/0x280 [ 2409.171872] ? trace_hardirqs_on+0x10/0x10 [ 2409.176112] loop_control_ioctl+0x161/0x3f0 [ 2409.180437] ? loop_lookup+0x190/0x190 [ 2409.184342] ? SyS_write+0x1b7/0x210 [ 2409.188061] ? loop_lookup+0x190/0x190 [ 2409.188073] do_vfs_ioctl+0x75a/0xff0 [ 2409.188086] ? lock_acquire+0x170/0x3f0 [ 2409.195741] ? ioctl_preallocate+0x1a0/0x1a0 [ 2409.195755] ? __fget+0x265/0x3e0 [ 2409.195767] ? do_vfs_ioctl+0xff0/0xff0 [ 2409.211603] ? security_file_ioctl+0x83/0xb0 [ 2409.216018] SyS_ioctl+0x7f/0xb0 [ 2409.219385] ? do_vfs_ioctl+0xff0/0xff0 [ 2409.223362] do_syscall_64+0x1d5/0x640 [ 2409.227252] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2409.232435] RIP: 0033:0x7ffa0bda9109 [ 2409.236144] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2409.243851] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2409.251104] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2409.258352] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 17:10:24 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 37) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:24 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000001540)={0x55c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6466}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff37c}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x55c}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000840)) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2db}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7461ca6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x944}, 0x4) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000001c0), 0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000200), 0x4) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) (async) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r3) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x23}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000002200)={0xcc0, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x0, 0x6}, {0x0, 0x80, 0x9, 0x5}, {0x0, 0x80, 0x3, 0x1f}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x3, 0x5c}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8733, 0x80, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x5}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x7, 0x401}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5aa}}}]}}]}, 0xcc0}, 0x1, 0x0, 0x0, 0x20011}, 0xef3ade1d79df4c5e) (async) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf0, 0xa, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0xc4, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xbbe}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'wg2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x82}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xffffffa2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x40080) 17:10:24 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040)) socket$isdn_base(0x22, 0x3, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000000)={0x1}) socket$isdn_base(0x22, 0x3, 0x0) 17:10:24 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0) sendmsg$can_raw(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x3, 0x0, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "920cff7b9cf31b48"}, 0x10}, 0x1, 0x0, 0x0, 0x90}, 0x800) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x4, 0x1, 0x1}, {0x3, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x1, 0x1}}, {{0x0, 0x1}, {0x2, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x2}}], 0x18) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/23, 0x17) socket$can_raw(0x1d, 0x3, 0x1) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0) (async) sendmsg$can_raw(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x3, 0x0, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "920cff7b9cf31b48"}, 0x10}, 0x1, 0x0, 0x0, 0x90}, 0x800) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x4, 0x1, 0x1}, {0x3, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x1, 0x1}}], 0x10) (async) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x1}, {0x1, 0x1}}, {{0x0, 0x1}, {0x2, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x2}}], 0x18) (async) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/23, 0x17) (async) 17:10:24 executing program 0: ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000080)={0x52, &(0x7f0000000040)}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000080)={0x52, &(0x7f0000000040)}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (async) 17:10:24 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2409.265610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2409.272980] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:24 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040)) socket$isdn_base(0x22, 0x3, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000000)={0x1}) socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) (async) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040)) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000000)={0x1}) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) [ 2409.319008] FAULT_INJECTION: forcing a failure. [ 2409.319008] name failslab, interval 1, probability 0, space 0, times 0 [ 2409.346781] CPU: 0 PID: 6016 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2409.354600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2409.363952] Call Trace: [ 2409.366551] dump_stack+0x1b2/0x281 [ 2409.370176] should_fail.cold+0x10a/0x149 [ 2409.370191] should_failslab+0xd6/0x130 [ 2409.370204] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2409.370215] __kmalloc_node+0x38/0x70 [ 2409.370227] sbitmap_init_node+0x10c/0x3d0 [ 2409.378316] sbitmap_queue_init_node+0x37/0x5d0 [ 2409.378329] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2409.378340] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 2409.378355] blk_mq_init_tags+0xf4/0x280 [ 2409.378366] blk_mq_alloc_rq_map+0x90/0x220 [ 2409.391454] blk_mq_sched_alloc_tags+0xaa/0x240 17:10:24 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040)) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000000)={0x1}) (async) socket$isdn_base(0x22, 0x3, 0x0) 17:10:24 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 17:10:24 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000), 0x0) [ 2409.391470] blk_mq_init_sched+0x18d/0x4a0 [ 2409.391481] ? _raw_spin_unlock+0x29/0x40 [ 2409.391496] elevator_init+0x2ee/0x410 [ 2409.391506] blk_mq_sched_init+0x28/0x40 [ 2409.391516] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 2409.391534] blk_mq_init_queue+0x5a/0x90 [ 2409.401190] loop_add+0x303/0x830 [ 2409.401202] ? loop_queue_rq+0x280/0x280 [ 2409.401212] ? trace_hardirqs_on+0x10/0x10 [ 2409.401227] loop_control_ioctl+0x161/0x3f0 [ 2409.401234] ? loop_lookup+0x190/0x190 [ 2409.401246] ? SyS_write+0x1b7/0x210 17:10:24 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000), 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000), 0x0) (async) [ 2409.410566] ? loop_lookup+0x190/0x190 [ 2409.410579] do_vfs_ioctl+0x75a/0xff0 [ 2409.410590] ? lock_acquire+0x170/0x3f0 [ 2409.410600] ? ioctl_preallocate+0x1a0/0x1a0 [ 2409.410614] ? __fget+0x265/0x3e0 [ 2409.468531] ? do_vfs_ioctl+0xff0/0xff0 [ 2409.468544] ? security_file_ioctl+0x83/0xb0 [ 2409.468555] SyS_ioctl+0x7f/0xb0 [ 2409.468564] ? do_vfs_ioctl+0xff0/0xff0 [ 2409.480219] do_syscall_64+0x1d5/0x640 [ 2409.480236] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2409.480245] RIP: 0033:0x7ffa0bda9109 17:10:24 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) 17:10:24 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 38) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:24 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:24 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) 17:10:24 executing program 0: sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000dc0)={0xb4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1712}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x944}, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000001c0), 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000200), 0x4) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700801b08000000000000404426005000650000fb04907800000000e0000001940ca5fc5e9dbd5196828bcb83171c7f000001ac1414aaac1414aaac1414aaac1414430001e0000002440ca6630000000000000009010045c5aac48b9a5bbc0c0d0fc5aa7c6d38eabb65483e7c8984a07a627ad21e4c4133ed89c56d77d069fdad676961de5373b98f8462179e33cb"]}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x154, r2, 0x8, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x138, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1b}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) [ 2409.480252] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 [ 2409.496419] ORIG_RAX: 0000000000000010 [ 2409.496426] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2409.496431] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2409.496437] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2409.496442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2409.496448] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:24 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000), 0x0) 17:10:24 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/95, 0x5f) socket$isdn_base(0x22, 0x3, 0x0) [ 2409.624323] FAULT_INJECTION: forcing a failure. [ 2409.624323] name failslab, interval 1, probability 0, space 0, times 0 [ 2409.648036] CPU: 0 PID: 6063 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2409.655855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2409.665557] Call Trace: [ 2409.668148] dump_stack+0x1b2/0x281 17:10:25 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 17:10:25 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x40282, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x300e5fac) 17:10:25 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x40282, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x300e5fac) [ 2409.671790] should_fail.cold+0x10a/0x149 [ 2409.675957] should_failslab+0xd6/0x130 [ 2409.679941] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2409.685046] sbitmap_queue_init_node+0x27f/0x5d0 [ 2409.689806] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 2409.696039] blk_mq_init_tags+0xf4/0x280 [ 2409.700102] blk_mq_alloc_rq_map+0x90/0x220 [ 2409.704448] blk_mq_sched_alloc_tags+0xaa/0x240 [ 2409.709129] blk_mq_init_sched+0x18d/0x4a0 [ 2409.713395] ? _raw_spin_unlock+0x29/0x40 [ 2409.717548] elevator_init+0x2ee/0x410 17:10:25 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x40282, 0x0) (rerun: 64) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x300e5fac) [ 2409.721435] blk_mq_sched_init+0x28/0x40 [ 2409.725490] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 2409.730601] blk_mq_init_queue+0x5a/0x90 [ 2409.734675] loop_add+0x303/0x830 [ 2409.738308] ? loop_queue_rq+0x280/0x280 [ 2409.742371] ? trace_hardirqs_on+0x10/0x10 [ 2409.746608] loop_control_ioctl+0x161/0x3f0 [ 2409.750931] ? loop_lookup+0x190/0x190 [ 2409.754811] ? SyS_write+0x1b7/0x210 [ 2409.758608] ? loop_lookup+0x190/0x190 [ 2409.762495] do_vfs_ioctl+0x75a/0xff0 [ 2409.766297] ? lock_acquire+0x170/0x3f0 [ 2409.770270] ? ioctl_preallocate+0x1a0/0x1a0 17:10:25 executing program 2: r0 = gettid() perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x100, 0x0, 0x0, 0x8}, r0, 0x20000000003, 0xffffffffffffffff, 0x0) 17:10:25 executing program 2: r0 = gettid() perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x100, 0x0, 0x0, 0x8}, r0, 0x20000000003, 0xffffffffffffffff, 0x0) gettid() (async) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x100, 0x0, 0x0, 0x8}, r0, 0x20000000003, 0xffffffffffffffff, 0x0) (async) [ 2409.774681] ? __fget+0x265/0x3e0 [ 2409.778134] ? do_vfs_ioctl+0xff0/0xff0 [ 2409.782107] ? security_file_ioctl+0x83/0xb0 [ 2409.786516] SyS_ioctl+0x7f/0xb0 [ 2409.789893] ? do_vfs_ioctl+0xff0/0xff0 [ 2409.794133] do_syscall_64+0x1d5/0x640 [ 2409.798024] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2409.803209] RIP: 0033:0x7ffa0bda9109 [ 2409.807003] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2409.814705] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 17:10:25 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 39) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:25 executing program 2: r0 = gettid() perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x100, 0x0, 0x0, 0x8}, r0, 0x20000000003, 0xffffffffffffffff, 0x0) gettid() (async) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x100, 0x0, 0x0, 0x8}, r0, 0x20000000003, 0xffffffffffffffff, 0x0) (async) 17:10:25 executing program 0: sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000dc0)={0xb4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1712}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x944}, 0x4) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000001c0), 0x4) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000200), 0x4) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) (async, rerun: 32) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) (async, rerun: 32) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r1) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700801b08000000000000404426005000650000fb04907800000000e0000001940ca5fc5e9dbd5196828bcb83171c7f000001ac1414aaac1414aaac1414aaac1414430001e0000002440ca6630000000000000009010045c5aac48b9a5bbc0c0d0fc5aa7c6d38eabb65483e7c8984a07a627ad21e4c4133ed89c56d77d069fdad676961de5373b98f8462179e33cb"]}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x154, r2, 0x8, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x138, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1b}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (rerun: 64) 17:10:25 executing program 5: modify_ldt$read(0x0, &(0x7f0000000080)=""/214, 0xd6) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:25 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/95, 0x5f) socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) (async) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/95, 0x5f) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) [ 2409.822077] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2409.829325] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2409.836573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2409.843822] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:25 executing program 1: r0 = semget$private(0x0, 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x9]) semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f0000000080)=""/169) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x5, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r1}, 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0x21) 17:10:25 executing program 5: modify_ldt$read(0x0, &(0x7f0000000080)=""/214, 0xd6) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2409.903631] FAULT_INJECTION: forcing a failure. [ 2409.903631] name failslab, interval 1, probability 0, space 0, times 0 [ 2409.938793] CPU: 1 PID: 6096 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 17:10:25 executing program 1: r0 = semget$private(0x0, 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x9]) semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f0000000080)=""/169) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x5, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r1}, 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0x21) semget$private(0x0, 0x1, 0x0) (async) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x9]) (async) semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f0000000080)=""/169) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x5}, 0x8) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r1}, 0x4) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0x21) (async) [ 2409.946614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2409.955963] Call Trace: [ 2409.958552] dump_stack+0x1b2/0x281 [ 2409.962192] should_fail.cold+0x10a/0x149 [ 2409.966352] should_failslab+0xd6/0x130 [ 2409.970330] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2409.975436] sbitmap_queue_init_node+0x27f/0x5d0 [ 2409.980200] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 2409.985480] blk_mq_init_tags+0x14b/0x280 [ 2409.989630] blk_mq_alloc_rq_map+0x90/0x220 [ 2409.993980] blk_mq_sched_alloc_tags+0xaa/0x240 [ 2409.998683] blk_mq_init_sched+0x18d/0x4a0 17:10:25 executing program 1: r0 = semget$private(0x0, 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x9]) semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f0000000080)=""/169) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x5, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r1}, 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0x21) semget$private(0x0, 0x1, 0x0) (async) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x9]) (async) semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f0000000080)=""/169) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x5}, 0x8) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r1}, 0x4) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0x21) (async) [ 2410.002908] ? _raw_spin_unlock+0x29/0x40 [ 2410.002923] elevator_init+0x2ee/0x410 [ 2410.002934] blk_mq_sched_init+0x28/0x40 [ 2410.002944] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 2410.002957] blk_mq_init_queue+0x5a/0x90 [ 2410.002966] loop_add+0x303/0x830 [ 2410.002976] ? loop_queue_rq+0x280/0x280 [ 2410.010992] ? trace_hardirqs_on+0x10/0x10 [ 2410.011009] loop_control_ioctl+0x161/0x3f0 [ 2410.011018] ? loop_lookup+0x190/0x190 [ 2410.031802] ? SyS_write+0x1b7/0x210 [ 2410.031818] ? loop_lookup+0x190/0x190 17:10:25 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/95, 0x5f) (async) socket$isdn_base(0x22, 0x3, 0x0) [ 2410.031828] do_vfs_ioctl+0x75a/0xff0 [ 2410.031838] ? lock_acquire+0x170/0x3f0 [ 2410.031847] ? ioctl_preallocate+0x1a0/0x1a0 [ 2410.031858] ? __fget+0x265/0x3e0 [ 2410.031869] ? do_vfs_ioctl+0xff0/0xff0 [ 2410.040412] ? security_file_ioctl+0x83/0xb0 [ 2410.040424] SyS_ioctl+0x7f/0xb0 [ 2410.040432] ? do_vfs_ioctl+0xff0/0xff0 [ 2410.040443] do_syscall_64+0x1d5/0x640 [ 2410.040458] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2410.079347] RIP: 0033:0x7ffa0bda9109 [ 2410.079353] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:10:25 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000004c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000004c0)) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000015c0), 0x141401, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001640), 0x10000, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f00000004c0)) r9 = socket$can_bcm(0x1d, 0x2, 0x2) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r10, 0x89f8, 0x0) io_submit(0x0, 0xa, &(0x7f0000001980)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x8, r1, &(0x7f0000000080)="0125b0fc01ac80a4f5ba130ccbd38db230d5717c5bddf85ef854fb0622c7819c7fb787995983d2b8a8a516df6178618e3d4cf5b6b0e54658d14f49057bf966860c415c9e0bc873cd013491be6c75f7d69f3e64cc68f0789b5ec1ea305c989939ad632a70422467d53b9271ab3aa8419cc86af388f5632a1c5c17c00792bad371", 0x80, 0xd051, 0x0, 0x3}, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x5, 0x263, r0, &(0x7f0000000140)="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", 0x1000, 0x0, 0x0, 0x3, r2}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x3, 0xdeb9, r0, &(0x7f0000001180)="c50d818c6d7f2d80a95bb3895eda9566c099ee50275df7075102e95cddbc5fb201c171c476aee0eb014b3050c815e367f21cce0f472278d83ce2379d175cd11748", 0x41, 0x8, 0x0, 0x1, r3}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x1, 0x6, r4, &(0x7f0000001240)="4134e4082ff87fe9ff147253253aa02b7d175abcc428573fe37c5dcdf66d3f6ce296b75319c4f76513f27017201057b713d6ec168206f171f97ef5558079fa6a60067f879f8b253f4b5ea90341166908a4b0fd930504f3d3f5fc7cadb71ba0ca44ef1592738203dcc34cb749a64483f9564faab1b7131c5833869d96e8317a17bd7d9a85fc9fcad40220bec2206adfbd27f6ead8fab7d5e18ea87cb284712da371c872b626066e67dc3f2f0904810884e73d7e268cf7cbe1b99837dac7f64e66ba5b6d121271e82046df29bad183b3691833c30c349bffda1de714323ee33f", 0xdf, 0xffff, 0x0, 0x6}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x7, 0x9, r5, &(0x7f0000001380)="d4e6c986154990a98267007a4308e35b73fc8ad4d916a47865f72f5e4220f513ff483483a00114be9b77e0d733d981572338e7411522eabdb75d9941393e05ee59efa8251bb085ccee732218196fdd4925c5a3d2026a8f7768b0efa90d493487218b0dd1cc29f6484173ab89de3620e1129b4d5a5b0fde921f9661318caf0a80a2d82204034c525990c0623504b0f442fa56e50418e0409ab2b08eef725b6605e5bfecf789719cb7614ffd7e3a1c5e7cd6d508c43b56e8bc65bbbd3c", 0xbc, 0x3f, 0x0, 0x2}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x3, 0x200, r0, &(0x7f0000001480)="b8a1829791beac5ff346edf6402cb35a3df43d0d9b6b31b3276f8cd2669c64c01de5997a65e45110820ec1cf4029a2fab7abbc8cfdb5f0a476fc086576f6c6ef703de1123eca16228467edeb30cf1263a66b0fdaefef189584a1163de9647a1a2498905d76288c9cda7742bd6b423822c982bc8220c36f88f886425277180ce058e20c290a7136cea9aa6934e6563aa843cd268df7a3ee9dfb97ae85b3d78e1aee64e7122735a68185da0431d231946df22c10d1b4435f90484f3a9bbc61bd0a821900ba71118768b0f0236a7e7e71a6048ac2bc5c533c045f9d3e9346c1319cb68db259c6a6e5de85f8527ab391", 0xee, 0x200000000000000, 0x0, 0x3}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x800, r6, &(0x7f0000001600)="60da247c7fb603b9b7dbb13afd6b", 0xe, 0x100000001, 0x0, 0x0, r7}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x3, 0x3, r8, &(0x7f00000016c0)="84adaee0713b66a6d43ec3e458e5192c378a1d28083fdda58f339da4bd532d360d63872b8911dff6f8815d853dcdf59af6b3a3bfa17af400617c4c3db36eb7cd1141895ef4f884e215ea631943b869867ef0bd4fe136d470498f01e44a506f8e14b3fd6f2774eda2b9b2ad62d5619ae1419bc4a0d0ff273f5c296146ae9e995c6e56208e3ac2ed05db3d976e00d12a8645fe1ef2d27569a3ad51e02fbe2c128186c1bdab13c954aea9dcd06e0f50cb89b76dac2caf9d86b5bac8946ee0d179818b55434e749eab5c9ad40466983972d7feda8951", 0xd4, 0x2, 0x0, 0x1}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0xe, 0x1f, r9, &(0x7f0000001800)="36c50324d5ab4470a02aad6419a9736d24de866caafe55f7670e4d1c189c78482e2f4a56f14374c2f0a560f1bcd1af30e260dbb8688bfe20bfcfb3ecd07eaaac87c08030ff9bda6a9c41c97594a00c83371d45986fe49152ae672a4bec100ccf39a59cf75a5f5801e5b0a22e5530073d362e629c3ddb70fff973d822ecd2f876bde4e412ad58f0b921f787214ea6", 0x8e, 0x9}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x1, 0x2, r0, &(0x7f0000001900)="f89367e8932af0d786cb79d0b6", 0xd, 0x6, 0x0, 0x1, r10}]) 17:10:25 executing program 5: modify_ldt$read(0x0, &(0x7f0000000080)=""/214, 0xd6) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:25 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 40) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:25 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) 17:10:25 executing program 0: sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000dc0)={0xb4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1712}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x944}, 0x4) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000001c0), 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000200), 0x4) (async) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700801b08000000000000404426005000650000fb04907800000000e0000001940ca5fc5e9dbd5196828bcb83171c7f000001ac1414aaac1414aaac1414aaac1414430001e0000002440ca6630000000000000009010045c5aac48b9a5bbc0c0d0fc5aa7c6d38eabb65483e7c8984a07a627ad21e4c4133ed89c56d77d069fdad676961de5373b98f8462179e33cb"]}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x540, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x154, r2, 0x8, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x138, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1b}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 17:10:25 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000200), 0x2, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00042bbd7000fbdbdf1503000000c3fe57a98224c3627f244b366314be8cd22d3053302bc2ee4fef1e35f96cfda11240a9e2e96e3e58ac1c91a494660871c98a345768bcdcb46349d4c5b5068bacc86acfb2de089b465ca18edee3f4e62434553b7828e7f1ff93d66c"], 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x48050) 17:10:25 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000004c0)) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000004c0)) (async) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000015c0), 0x141401, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001640), 0x10000, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f00000004c0)) r9 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r10, 0x89f8, 0x0) io_submit(0x0, 0xa, &(0x7f0000001980)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x8, r1, &(0x7f0000000080)="0125b0fc01ac80a4f5ba130ccbd38db230d5717c5bddf85ef854fb0622c7819c7fb787995983d2b8a8a516df6178618e3d4cf5b6b0e54658d14f49057bf966860c415c9e0bc873cd013491be6c75f7d69f3e64cc68f0789b5ec1ea305c989939ad632a70422467d53b9271ab3aa8419cc86af388f5632a1c5c17c00792bad371", 0x80, 0xd051, 0x0, 0x3}, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x5, 0x263, r0, &(0x7f0000000140)="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", 0x1000, 0x0, 0x0, 0x3, r2}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x3, 0xdeb9, r0, &(0x7f0000001180)="c50d818c6d7f2d80a95bb3895eda9566c099ee50275df7075102e95cddbc5fb201c171c476aee0eb014b3050c815e367f21cce0f472278d83ce2379d175cd11748", 0x41, 0x8, 0x0, 0x1, r3}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x1, 0x6, r4, &(0x7f0000001240)="4134e4082ff87fe9ff147253253aa02b7d175abcc428573fe37c5dcdf66d3f6ce296b75319c4f76513f27017201057b713d6ec168206f171f97ef5558079fa6a60067f879f8b253f4b5ea90341166908a4b0fd930504f3d3f5fc7cadb71ba0ca44ef1592738203dcc34cb749a64483f9564faab1b7131c5833869d96e8317a17bd7d9a85fc9fcad40220bec2206adfbd27f6ead8fab7d5e18ea87cb284712da371c872b626066e67dc3f2f0904810884e73d7e268cf7cbe1b99837dac7f64e66ba5b6d121271e82046df29bad183b3691833c30c349bffda1de714323ee33f", 0xdf, 0xffff, 0x0, 0x6}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x7, 0x9, r5, &(0x7f0000001380)="d4e6c986154990a98267007a4308e35b73fc8ad4d916a47865f72f5e4220f513ff483483a00114be9b77e0d733d981572338e7411522eabdb75d9941393e05ee59efa8251bb085ccee732218196fdd4925c5a3d2026a8f7768b0efa90d493487218b0dd1cc29f6484173ab89de3620e1129b4d5a5b0fde921f9661318caf0a80a2d82204034c525990c0623504b0f442fa56e50418e0409ab2b08eef725b6605e5bfecf789719cb7614ffd7e3a1c5e7cd6d508c43b56e8bc65bbbd3c", 0xbc, 0x3f, 0x0, 0x2}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x3, 0x200, r0, &(0x7f0000001480)="b8a1829791beac5ff346edf6402cb35a3df43d0d9b6b31b3276f8cd2669c64c01de5997a65e45110820ec1cf4029a2fab7abbc8cfdb5f0a476fc086576f6c6ef703de1123eca16228467edeb30cf1263a66b0fdaefef189584a1163de9647a1a2498905d76288c9cda7742bd6b423822c982bc8220c36f88f886425277180ce058e20c290a7136cea9aa6934e6563aa843cd268df7a3ee9dfb97ae85b3d78e1aee64e7122735a68185da0431d231946df22c10d1b4435f90484f3a9bbc61bd0a821900ba71118768b0f0236a7e7e71a6048ac2bc5c533c045f9d3e9346c1319cb68db259c6a6e5de85f8527ab391", 0xee, 0x200000000000000, 0x0, 0x3}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x800, r6, &(0x7f0000001600)="60da247c7fb603b9b7dbb13afd6b", 0xe, 0x100000001, 0x0, 0x0, r7}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x3, 0x3, r8, &(0x7f00000016c0)="84adaee0713b66a6d43ec3e458e5192c378a1d28083fdda58f339da4bd532d360d63872b8911dff6f8815d853dcdf59af6b3a3bfa17af400617c4c3db36eb7cd1141895ef4f884e215ea631943b869867ef0bd4fe136d470498f01e44a506f8e14b3fd6f2774eda2b9b2ad62d5619ae1419bc4a0d0ff273f5c296146ae9e995c6e56208e3ac2ed05db3d976e00d12a8645fe1ef2d27569a3ad51e02fbe2c128186c1bdab13c954aea9dcd06e0f50cb89b76dac2caf9d86b5bac8946ee0d179818b55434e749eab5c9ad40466983972d7feda8951", 0xd4, 0x2, 0x0, 0x1}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0xe, 0x1f, r9, &(0x7f0000001800)="36c50324d5ab4470a02aad6419a9736d24de866caafe55f7670e4d1c189c78482e2f4a56f14374c2f0a560f1bcd1af30e260dbb8688bfe20bfcfb3ecd07eaaac87c08030ff9bda6a9c41c97594a00c83371d45986fe49152ae672a4bec100ccf39a59cf75a5f5801e5b0a22e5530073d362e629c3ddb70fff973d822ecd2f876bde4e412ad58f0b921f787214ea6", 0x8e, 0x9}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x1, 0x2, r0, &(0x7f0000001900)="f89367e8932af0d786cb79d0b6", 0xd, 0x6, 0x0, 0x1, r10}]) 17:10:25 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x2, 0x3, 0x302, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x1f}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x100}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3a}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x35}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x1a}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x40050) [ 2410.079365] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2410.079370] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2410.079381] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2410.087208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2410.087214] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:25 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) 17:10:25 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000200), 0x2, 0x0) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00042bbd7000fbdbdf1503000000c3fe57a98224c3627f244b366314be8cd22d3053302bc2ee4fef1e35f96cfda11240a9e2e96e3e58ac1c91a494660871c98a345768bcdcb46349d4c5b5068bacc86acfb2de089b465ca18edee3f4e62434553b7828e7f1ff93d66c"], 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x48050) 17:10:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000a0a01b0b42868a168d7230001000014"], 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2088}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x70, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x86}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000002c0)={0x2, 0x57, &(0x7f0000000240)="48a275360163f3cdc609c29321acd364615d4376fed415c6a84792a781695d9c4bc9970389e351a212a30fbfdc344407d3abfcedd2c17a4b8e2340ff22435140d10dae52c11e685cf4310fd331cf5cb534cf98240cb9c6"}) socket(0x2b, 0x0, 0xa2) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) 17:10:25 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) 17:10:25 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async, rerun: 32) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x2, 0x3, 0x302, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x1f}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x100}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3a}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x35}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x1a}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x40050) 17:10:25 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000004c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000004c0)) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000015c0), 0x141401, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001640), 0x10000, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f00000004c0)) r9 = socket$can_bcm(0x1d, 0x2, 0x2) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r10, 0x89f8, 0x0) io_submit(0x0, 0xa, &(0x7f0000001980)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x8, r1, &(0x7f0000000080)="0125b0fc01ac80a4f5ba130ccbd38db230d5717c5bddf85ef854fb0622c7819c7fb787995983d2b8a8a516df6178618e3d4cf5b6b0e54658d14f49057bf966860c415c9e0bc873cd013491be6c75f7d69f3e64cc68f0789b5ec1ea305c989939ad632a70422467d53b9271ab3aa8419cc86af388f5632a1c5c17c00792bad371", 0x80, 0xd051, 0x0, 0x3}, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x5, 0x263, r0, &(0x7f0000000140)="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", 0x1000, 0x0, 0x0, 0x3, r2}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x3, 0xdeb9, r0, &(0x7f0000001180)="c50d818c6d7f2d80a95bb3895eda9566c099ee50275df7075102e95cddbc5fb201c171c476aee0eb014b3050c815e367f21cce0f472278d83ce2379d175cd11748", 0x41, 0x8, 0x0, 0x1, r3}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x1, 0x6, r4, &(0x7f0000001240)="4134e4082ff87fe9ff147253253aa02b7d175abcc428573fe37c5dcdf66d3f6ce296b75319c4f76513f27017201057b713d6ec168206f171f97ef5558079fa6a60067f879f8b253f4b5ea90341166908a4b0fd930504f3d3f5fc7cadb71ba0ca44ef1592738203dcc34cb749a64483f9564faab1b7131c5833869d96e8317a17bd7d9a85fc9fcad40220bec2206adfbd27f6ead8fab7d5e18ea87cb284712da371c872b626066e67dc3f2f0904810884e73d7e268cf7cbe1b99837dac7f64e66ba5b6d121271e82046df29bad183b3691833c30c349bffda1de714323ee33f", 0xdf, 0xffff, 0x0, 0x6}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x7, 0x9, r5, &(0x7f0000001380)="d4e6c986154990a98267007a4308e35b73fc8ad4d916a47865f72f5e4220f513ff483483a00114be9b77e0d733d981572338e7411522eabdb75d9941393e05ee59efa8251bb085ccee732218196fdd4925c5a3d2026a8f7768b0efa90d493487218b0dd1cc29f6484173ab89de3620e1129b4d5a5b0fde921f9661318caf0a80a2d82204034c525990c0623504b0f442fa56e50418e0409ab2b08eef725b6605e5bfecf789719cb7614ffd7e3a1c5e7cd6d508c43b56e8bc65bbbd3c", 0xbc, 0x3f, 0x0, 0x2}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x3, 0x200, r0, &(0x7f0000001480)="b8a1829791beac5ff346edf6402cb35a3df43d0d9b6b31b3276f8cd2669c64c01de5997a65e45110820ec1cf4029a2fab7abbc8cfdb5f0a476fc086576f6c6ef703de1123eca16228467edeb30cf1263a66b0fdaefef189584a1163de9647a1a2498905d76288c9cda7742bd6b423822c982bc8220c36f88f886425277180ce058e20c290a7136cea9aa6934e6563aa843cd268df7a3ee9dfb97ae85b3d78e1aee64e7122735a68185da0431d231946df22c10d1b4435f90484f3a9bbc61bd0a821900ba71118768b0f0236a7e7e71a6048ac2bc5c533c045f9d3e9346c1319cb68db259c6a6e5de85f8527ab391", 0xee, 0x200000000000000, 0x0, 0x3}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x800, r6, &(0x7f0000001600)="60da247c7fb603b9b7dbb13afd6b", 0xe, 0x100000001, 0x0, 0x0, r7}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x3, 0x3, r8, &(0x7f00000016c0)="84adaee0713b66a6d43ec3e458e5192c378a1d28083fdda58f339da4bd532d360d63872b8911dff6f8815d853dcdf59af6b3a3bfa17af400617c4c3db36eb7cd1141895ef4f884e215ea631943b869867ef0bd4fe136d470498f01e44a506f8e14b3fd6f2774eda2b9b2ad62d5619ae1419bc4a0d0ff273f5c296146ae9e995c6e56208e3ac2ed05db3d976e00d12a8645fe1ef2d27569a3ad51e02fbe2c128186c1bdab13c954aea9dcd06e0f50cb89b76dac2caf9d86b5bac8946ee0d179818b55434e749eab5c9ad40466983972d7feda8951", 0xd4, 0x2, 0x0, 0x1}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0xe, 0x1f, r9, &(0x7f0000001800)="36c50324d5ab4470a02aad6419a9736d24de866caafe55f7670e4d1c189c78482e2f4a56f14374c2f0a560f1bcd1af30e260dbb8688bfe20bfcfb3ecd07eaaac87c08030ff9bda6a9c41c97594a00c83371d45986fe49152ae672a4bec100ccf39a59cf75a5f5801e5b0a22e5530073d362e629c3ddb70fff973d822ecd2f876bde4e412ad58f0b921f787214ea6", 0x8e, 0x9}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x1, 0x2, r0, &(0x7f0000001900)="f89367e8932af0d786cb79d0b6", 0xd, 0x6, 0x0, 0x1, r10}]) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000004c0)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000004c0)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000015c0), 0x141401, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001640), 0x10000, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f00000004c0)) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r10, 0x89f8, 0x0) (async) io_submit(0x0, 0xa, &(0x7f0000001980)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x8, r1, &(0x7f0000000080)="0125b0fc01ac80a4f5ba130ccbd38db230d5717c5bddf85ef854fb0622c7819c7fb787995983d2b8a8a516df6178618e3d4cf5b6b0e54658d14f49057bf966860c415c9e0bc873cd013491be6c75f7d69f3e64cc68f0789b5ec1ea305c989939ad632a70422467d53b9271ab3aa8419cc86af388f5632a1c5c17c00792bad371", 0x80, 0xd051, 0x0, 0x3}, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x5, 0x263, r0, &(0x7f0000000140)="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", 0x1000, 0x0, 0x0, 0x3, r2}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x3, 0xdeb9, r0, &(0x7f0000001180)="c50d818c6d7f2d80a95bb3895eda9566c099ee50275df7075102e95cddbc5fb201c171c476aee0eb014b3050c815e367f21cce0f472278d83ce2379d175cd11748", 0x41, 0x8, 0x0, 0x1, r3}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x1, 0x6, r4, &(0x7f0000001240)="4134e4082ff87fe9ff147253253aa02b7d175abcc428573fe37c5dcdf66d3f6ce296b75319c4f76513f27017201057b713d6ec168206f171f97ef5558079fa6a60067f879f8b253f4b5ea90341166908a4b0fd930504f3d3f5fc7cadb71ba0ca44ef1592738203dcc34cb749a64483f9564faab1b7131c5833869d96e8317a17bd7d9a85fc9fcad40220bec2206adfbd27f6ead8fab7d5e18ea87cb284712da371c872b626066e67dc3f2f0904810884e73d7e268cf7cbe1b99837dac7f64e66ba5b6d121271e82046df29bad183b3691833c30c349bffda1de714323ee33f", 0xdf, 0xffff, 0x0, 0x6}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x7, 0x9, r5, &(0x7f0000001380)="d4e6c986154990a98267007a4308e35b73fc8ad4d916a47865f72f5e4220f513ff483483a00114be9b77e0d733d981572338e7411522eabdb75d9941393e05ee59efa8251bb085ccee732218196fdd4925c5a3d2026a8f7768b0efa90d493487218b0dd1cc29f6484173ab89de3620e1129b4d5a5b0fde921f9661318caf0a80a2d82204034c525990c0623504b0f442fa56e50418e0409ab2b08eef725b6605e5bfecf789719cb7614ffd7e3a1c5e7cd6d508c43b56e8bc65bbbd3c", 0xbc, 0x3f, 0x0, 0x2}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x3, 0x200, r0, &(0x7f0000001480)="b8a1829791beac5ff346edf6402cb35a3df43d0d9b6b31b3276f8cd2669c64c01de5997a65e45110820ec1cf4029a2fab7abbc8cfdb5f0a476fc086576f6c6ef703de1123eca16228467edeb30cf1263a66b0fdaefef189584a1163de9647a1a2498905d76288c9cda7742bd6b423822c982bc8220c36f88f886425277180ce058e20c290a7136cea9aa6934e6563aa843cd268df7a3ee9dfb97ae85b3d78e1aee64e7122735a68185da0431d231946df22c10d1b4435f90484f3a9bbc61bd0a821900ba71118768b0f0236a7e7e71a6048ac2bc5c533c045f9d3e9346c1319cb68db259c6a6e5de85f8527ab391", 0xee, 0x200000000000000, 0x0, 0x3}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x800, r6, &(0x7f0000001600)="60da247c7fb603b9b7dbb13afd6b", 0xe, 0x100000001, 0x0, 0x0, r7}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x3, 0x3, r8, &(0x7f00000016c0)="84adaee0713b66a6d43ec3e458e5192c378a1d28083fdda58f339da4bd532d360d63872b8911dff6f8815d853dcdf59af6b3a3bfa17af400617c4c3db36eb7cd1141895ef4f884e215ea631943b869867ef0bd4fe136d470498f01e44a506f8e14b3fd6f2774eda2b9b2ad62d5619ae1419bc4a0d0ff273f5c296146ae9e995c6e56208e3ac2ed05db3d976e00d12a8645fe1ef2d27569a3ad51e02fbe2c128186c1bdab13c954aea9dcd06e0f50cb89b76dac2caf9d86b5bac8946ee0d179818b55434e749eab5c9ad40466983972d7feda8951", 0xd4, 0x2, 0x0, 0x1}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0xe, 0x1f, r9, &(0x7f0000001800)="36c50324d5ab4470a02aad6419a9736d24de866caafe55f7670e4d1c189c78482e2f4a56f14374c2f0a560f1bcd1af30e260dbb8688bfe20bfcfb3ecd07eaaac87c08030ff9bda6a9c41c97594a00c83371d45986fe49152ae672a4bec100ccf39a59cf75a5f5801e5b0a22e5530073d362e629c3ddb70fff973d822ecd2f876bde4e412ad58f0b921f787214ea6", 0x8e, 0x9}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x1, 0x2, r0, &(0x7f0000001900)="f89367e8932af0d786cb79d0b6", 0xd, 0x6, 0x0, 0x1, r10}]) (async) [ 2410.237920] FAULT_INJECTION: forcing a failure. [ 2410.237920] name failslab, interval 1, probability 0, space 0, times 0 [ 2410.284740] CPU: 0 PID: 6155 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2410.292564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2410.302097] Call Trace: [ 2410.304687] dump_stack+0x1b2/0x281 [ 2410.308327] should_fail.cold+0x10a/0x149 [ 2410.312492] should_failslab+0xd6/0x130 [ 2410.316473] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2410.321583] __kmalloc_node+0x38/0x70 [ 2410.325378] blk_mq_alloc_rq_map+0xd2/0x220 [ 2410.329695] blk_mq_sched_alloc_tags+0xaa/0x240 [ 2410.334571] blk_mq_init_sched+0x18d/0x4a0 [ 2410.338804] ? _raw_spin_unlock+0x29/0x40 [ 2410.342939] elevator_init+0x2ee/0x410 [ 2410.346810] blk_mq_sched_init+0x28/0x40 [ 2410.351748] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 2410.356833] blk_mq_init_queue+0x5a/0x90 [ 2410.360889] loop_add+0x303/0x830 [ 2410.364323] ? loop_queue_rq+0x280/0x280 [ 2410.368380] ? trace_hardirqs_on+0x10/0x10 [ 2410.372599] loop_control_ioctl+0x161/0x3f0 [ 2410.376902] ? loop_lookup+0x190/0x190 [ 2410.380780] ? SyS_write+0x1b7/0x210 [ 2410.384482] ? loop_lookup+0x190/0x190 [ 2410.388353] do_vfs_ioctl+0x75a/0xff0 [ 2410.392141] ? lock_acquire+0x170/0x3f0 [ 2410.396105] ? ioctl_preallocate+0x1a0/0x1a0 [ 2410.400511] ? __fget+0x265/0x3e0 [ 2410.403962] ? do_vfs_ioctl+0xff0/0xff0 [ 2410.408017] ? security_file_ioctl+0x83/0xb0 [ 2410.412405] SyS_ioctl+0x7f/0xb0 [ 2410.415764] ? do_vfs_ioctl+0xff0/0xff0 [ 2410.419736] do_syscall_64+0x1d5/0x640 [ 2410.423626] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2410.428986] RIP: 0033:0x7ffa0bda9109 17:10:25 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 41) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000a0a01b0b42868a168d7230001000014"], 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2088}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x70, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x86}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000002c0)={0x2, 0x57, &(0x7f0000000240)="48a275360163f3cdc609c29321acd364615d4376fed415c6a84792a781695d9c4bc9970389e351a212a30fbfdc344407d3abfcedd2c17a4b8e2340ff22435140d10dae52c11e685cf4310fd331cf5cb534cf98240cb9c6"}) socket(0x2b, 0x0, 0xa2) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000a0a01b0b42868a168d7230001000014"], 0x14}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2088}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x70, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x86}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000002c0)={0x2, 0x57, &(0x7f0000000240)="48a275360163f3cdc609c29321acd364615d4376fed415c6a84792a781695d9c4bc9970389e351a212a30fbfdc344407d3abfcedd2c17a4b8e2340ff22435140d10dae52c11e685cf4310fd331cf5cb534cf98240cb9c6"}) (async) socket(0x2b, 0x0, 0xa2) (async) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) (async) 17:10:25 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000200), 0x2, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00042bbd7000fbdbdf1503000000c3fe57a98224c3627f244b366314be8cd22d3053302bc2ee4fef1e35f96cfda11240a9e2e96e3e58ac1c91a494660871c98a345768bcdcb46349d4c5b5068bacc86acfb2de089b465ca18edee3f4e62434553b7828e7f1ff93d66c"], 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x48050) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_freezer_state(r1, &(0x7f0000000200), 0x2, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00042bbd7000fbdbdf1503000000c3fe57a98224c3627f244b366314be8cd22d3053302bc2ee4fef1e35f96cfda11240a9e2e96e3e58ac1c91a494660871c98a345768bcdcb46349d4c5b5068bacc86acfb2de089b465ca18edee3f4e62434553b7828e7f1ff93d66c"], 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x48050) (async) 17:10:25 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x41494, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0xc00, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x3f, 0x8, 0x2, 0x8, 0x0, 0x7f, 0x40bc0, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1}, 0x0, 0x9, 0x1, 0x0, 0x89, 0x40, 0x400, 0x0, 0x4, 0x0, 0x2}, r1, 0xffffffffffffffff, r0, 0xb) 17:10:25 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x0) r1 = socket(0x27, 0x800, 0x1000) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 2410.432683] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2410.440381] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2410.447631] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2410.454883] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2410.462135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2410.469383] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:25 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x2, 0x3, 0x302, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x1f}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x100}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3a}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x35}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x1a}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x40050) 17:10:25 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x0) (async) r1 = socket(0x27, 0x800, 0x1000) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) 17:10:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000a0a01b0b42868a168d7230001000014"], 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2088}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x70, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x86}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000002c0)={0x2, 0x57, &(0x7f0000000240)="48a275360163f3cdc609c29321acd364615d4376fed415c6a84792a781695d9c4bc9970389e351a212a30fbfdc344407d3abfcedd2c17a4b8e2340ff22435140d10dae52c11e685cf4310fd331cf5cb534cf98240cb9c6"}) socket(0x2b, 0x0, 0xa2) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000a0a01b0b42868a168d7230001000014"], 0x14}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2088}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x70, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x86}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000002c0)={0x2, 0x57, &(0x7f0000000240)="48a275360163f3cdc609c29321acd364615d4376fed415c6a84792a781695d9c4bc9970389e351a212a30fbfdc344407d3abfcedd2c17a4b8e2340ff22435140d10dae52c11e685cf4310fd331cf5cb534cf98240cb9c6"}) (async) socket(0x2b, 0x0, 0xa2) (async) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) (async) [ 2410.552520] FAULT_INJECTION: forcing a failure. [ 2410.552520] name failslab, interval 1, probability 0, space 0, times 0 [ 2410.574768] CPU: 0 PID: 6212 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2410.582602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2410.591957] Call Trace: [ 2410.594561] dump_stack+0x1b2/0x281 [ 2410.598196] should_fail.cold+0x10a/0x149 [ 2410.602353] should_failslab+0xd6/0x130 [ 2410.606425] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2410.611542] __kmalloc_node+0x38/0x70 [ 2410.615350] blk_mq_alloc_rq_map+0x113/0x220 [ 2410.619766] blk_mq_sched_alloc_tags+0xaa/0x240 [ 2410.624445] blk_mq_init_sched+0x18d/0x4a0 [ 2410.628685] ? _raw_spin_unlock+0x29/0x40 [ 2410.632844] elevator_init+0x2ee/0x410 [ 2410.636737] blk_mq_sched_init+0x28/0x40 [ 2410.640803] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 2410.646005] blk_mq_init_queue+0x5a/0x90 17:10:25 executing program 5: socket(0x1d, 0x0, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:25 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x41494, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0xc00, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x3f, 0x8, 0x2, 0x8, 0x0, 0x7f, 0x40bc0, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1}, 0x0, 0x9, 0x1, 0x0, 0x89, 0x40, 0x400, 0x0, 0x4, 0x0, 0x2}, r1, 0xffffffffffffffff, r0, 0xb) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x41494, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0xc00, 0x0) (async) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x3f, 0x8, 0x2, 0x8, 0x0, 0x7f, 0x40bc0, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1}, 0x0, 0x9, 0x1, 0x0, 0x89, 0x40, 0x400, 0x0, 0x4, 0x0, 0x2}, r1, 0xffffffffffffffff, r0, 0xb) (async) 17:10:26 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x41494, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0xc00, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x3f, 0x8, 0x2, 0x8, 0x0, 0x7f, 0x40bc0, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1}, 0x0, 0x9, 0x1, 0x0, 0x89, 0x40, 0x400, 0x0, 0x4, 0x0, 0x2}, r1, 0xffffffffffffffff, r0, 0xb) 17:10:26 executing program 5: socket(0x1d, 0x0, 0x1) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2410.650074] loop_add+0x303/0x830 [ 2410.653641] ? loop_queue_rq+0x280/0x280 [ 2410.657702] ? trace_hardirqs_on+0x10/0x10 [ 2410.661947] loop_control_ioctl+0x161/0x3f0 [ 2410.666270] ? loop_lookup+0x190/0x190 [ 2410.670159] ? SyS_write+0x1b7/0x210 [ 2410.673882] ? loop_lookup+0x190/0x190 [ 2410.677776] do_vfs_ioctl+0x75a/0xff0 [ 2410.681585] ? lock_acquire+0x170/0x3f0 [ 2410.685565] ? ioctl_preallocate+0x1a0/0x1a0 [ 2410.690055] ? __fget+0x265/0x3e0 [ 2410.693495] ? do_vfs_ioctl+0xff0/0xff0 [ 2410.697538] ? security_file_ioctl+0x83/0xb0 [ 2410.702029] SyS_ioctl+0x7f/0xb0 [ 2410.705378] ? do_vfs_ioctl+0xff0/0xff0 [ 2410.709442] do_syscall_64+0x1d5/0x640 [ 2410.713367] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2410.718545] RIP: 0033:0x7ffa0bda9109 [ 2410.722235] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2410.729968] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2410.737230] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2410.744488] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 17:10:26 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 42) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:26 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000040}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000b0300000000eaffffff000700000a0800034048000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x811) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000004c0)) sendmsg$nl_netfilter(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0xf, 0x5, 0x101, 0x70bd28, 0x25dfdbfe, {0x3, 0x0, 0x8}, [@generic="cc84175db208fcd5da62ac9490611a0cc70445a05324f6f631b20fa8bc7687f5492cc169a9cc69977398922bc47552d729637995ef2ba3a61f458c90e9dc80df3a"]}, 0x58}, 0x1, 0x0, 0x0, 0x4014}, 0x41) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500), 0x501800, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x124, 0x1, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0x9e, 0x6, "69adde777d92531f6e55ddf61c18e172334795c1a43ab372801d677a693f7af57d998f91d168c4cb4fc284c92534f9684b1a9671d0ead8e888cc9b1f5dd222d328a625a70d59a8d7b64b1b1b9a21150e52a21039befd190aeca0f784a4d893cde6e286903e8a3068e1f92e2c26f7f958f9f4f129f960fb872b6558378d2ad440361e4df0039eb9123146a5d895e774b5f0409e41042ba6e3df9c"}, @NFTA_TABLE_USERDATA={0x5a, 0x6, "6456c2e7ca69f23d967c75c08c2f3d0d918dcb1fe0cc5975eb8d048376a9c160eebc9e296b0aa585e475ff85d9d96a234bbc4d330453efa805037ae1c819dc0d81aba5f91a2cde3a7f7ab1ab7c777dd6ea0323858678"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, 0x124}}, 0x800) socket(0x9f9e5eb5f9d2c933, 0x6, 0x400) 17:10:26 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83200, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}, 0x0, 0x2000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x7c, 0x8000) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000000c0)=""/157) 17:10:26 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x0) r1 = socket(0x27, 0x800, 0x1000) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) 17:10:26 executing program 5: socket(0x1d, 0x0, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:26 executing program 0: ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000200)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES8=r0], 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x88d5) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x9, 0x6, 0x84087c439cf5a4b1, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x200}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1ff}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x801) [ 2410.751753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2410.759022] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:26 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x14100, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8a3}, [@exit]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x9f, &(0x7f00000000c0)=""/159, 0x41000, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0xd, 0x3, 0xfffffffb}, 0x10, 0x2461a, r1, 0x0, &(0x7f0000000200)}, 0x80) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000), 0x0) 17:10:26 executing program 0: ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000200)) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES8=r0], 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x88d5) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x9, 0x6, 0x84087c439cf5a4b1, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x200}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1ff}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x801) 17:10:26 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83200, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}, 0x0, 0x2000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x7c, 0x8000) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000000c0)=""/157) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83200, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}, 0x0, 0x2000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x7c, 0x8000) (async) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000000c0)=""/157) (async) 17:10:26 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000300)=""/74) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="5e00010000000000000000000000000000066d3580015123fcd7e8789280a4870e42b95efc7d9b89496175de5e311766f72057b14c35f382fd13cdcc58c28a96d6ea2dd1ac495096719239dc2b35935657f33e740e3d20e3952966b5cf8a06942f5d5039b78e961b3af799c979952822d03407962ed9c6fc21a2f9008c1eed80a679ef2835c51f85cd868e8a07fd0fff61331d88332e1eaf0c33eac7252030c2cb146345e06daae9d6ce702cd0e88e34a0000b59ba39fca6fccac526a1"], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) r3 = socket(0x27, 0x5, 0x8) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffe}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004800) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2410.832946] FAULT_INJECTION: forcing a failure. [ 2410.832946] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2410.866329] CPU: 1 PID: 6256 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2410.874152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2410.883504] Call Trace: [ 2410.886097] dump_stack+0x1b2/0x281 [ 2410.889734] should_fail.cold+0x10a/0x149 [ 2410.893887] __alloc_pages_nodemask+0x22c/0x2720 [ 2410.898649] ? kasan_kmalloc+0xeb/0x160 [ 2410.902726] ? blk_mq_alloc_rq_map+0x113/0x220 [ 2410.907487] ? blk_mq_sched_alloc_tags+0xaa/0x240 [ 2410.912511] ? elevator_init+0x2ee/0x410 [ 2410.916578] ? blk_mq_sched_init+0x28/0x40 [ 2410.920813] ? blk_mq_init_allocated_queue+0xca0/0xfd0 [ 2410.926092] ? loop_control_ioctl+0x161/0x3f0 17:10:26 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000300)=""/74) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="5e00010000000000000000000000000000066d3580015123fcd7e8789280a4870e42b95efc7d9b89496175de5e311766f72057b14c35f382fd13cdcc58c28a96d6ea2dd1ac495096719239dc2b35935657f33e740e3d20e3952966b5cf8a06942f5d5039b78e961b3af799c979952822d03407962ed9c6fc21a2f9008c1eed80a679ef2835c51f85cd868e8a07fd0fff61331d88332e1eaf0c33eac7252030c2cb146345e06daae9d6ce702cd0e88e34a0000b59ba39fca6fccac526a1"], 0x14}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) r3 = socket(0x27, 0x5, 0x8) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffe}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004800) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:26 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000300)=""/74) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="5e00010000000000000000000000000000066d3580015123fcd7e8789280a4870e42b95efc7d9b89496175de5e311766f72057b14c35f382fd13cdcc58c28a96d6ea2dd1ac495096719239dc2b35935657f33e740e3d20e3952966b5cf8a06942f5d5039b78e961b3af799c979952822d03407962ed9c6fc21a2f9008c1eed80a679ef2835c51f85cd868e8a07fd0fff61331d88332e1eaf0c33eac7252030c2cb146345e06daae9d6ce702cd0e88e34a0000b59ba39fca6fccac526a1"], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) r3 = socket(0x27, 0x5, 0x8) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffe}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004800) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000300)=""/74) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="5e00010000000000000000000000000000066d3580015123fcd7e8789280a4870e42b95efc7d9b89496175de5e311766f72057b14c35f382fd13cdcc58c28a96d6ea2dd1ac495096719239dc2b35935657f33e740e3d20e3952966b5cf8a06942f5d5039b78e961b3af799c979952822d03407962ed9c6fc21a2f9008c1eed80a679ef2835c51f85cd868e8a07fd0fff61331d88332e1eaf0c33eac7252030c2cb146345e06daae9d6ce702cd0e88e34a0000b59ba39fca6fccac526a1"], 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) socket(0x27, 0x5, 0x8) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffe}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004800) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) [ 2410.930591] ? do_vfs_ioctl+0x75a/0xff0 [ 2410.934565] ? do_syscall_64+0x1d5/0x640 [ 2410.938624] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2410.943991] ? __mutex_unlock_slowpath+0x75/0x770 [ 2410.948935] ? fs_reclaim_release+0xd0/0x110 [ 2410.955635] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2410.960491] ? __lockdep_init_map+0x100/0x560 [ 2410.964990] ? _find_next_bit+0xdb/0x100 [ 2410.969054] ? __cpu_to_node+0x7b/0xa0 [ 2410.972944] ? blk_mq_hw_queue_to_node+0x9f/0xf0 [ 2410.977702] blk_mq_alloc_rqs+0x227/0x6d0 [ 2410.981944] ? blk_mq_alloc_rq_map+0x9d/0x220 [ 2410.986451] blk_mq_sched_alloc_tags+0x112/0x240 [ 2410.991388] blk_mq_init_sched+0x18d/0x4a0 [ 2410.995619] ? _raw_spin_unlock+0x29/0x40 [ 2410.999771] elevator_init+0x2ee/0x410 [ 2411.003653] blk_mq_sched_init+0x28/0x40 [ 2411.007690] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 2411.012784] blk_mq_init_queue+0x5a/0x90 [ 2411.016922] loop_add+0x303/0x830 [ 2411.020352] ? loop_queue_rq+0x280/0x280 [ 2411.024392] ? trace_hardirqs_on+0x10/0x10 [ 2411.028617] loop_control_ioctl+0x161/0x3f0 [ 2411.032922] ? loop_lookup+0x190/0x190 [ 2411.036791] ? SyS_write+0x1b7/0x210 [ 2411.040484] ? loop_lookup+0x190/0x190 [ 2411.044519] do_vfs_ioctl+0x75a/0xff0 [ 2411.048298] ? lock_acquire+0x170/0x3f0 [ 2411.052259] ? ioctl_preallocate+0x1a0/0x1a0 [ 2411.056653] ? __fget+0x265/0x3e0 [ 2411.060085] ? do_vfs_ioctl+0xff0/0xff0 [ 2411.064040] ? security_file_ioctl+0x83/0xb0 [ 2411.068427] SyS_ioctl+0x7f/0xb0 [ 2411.071783] ? do_vfs_ioctl+0xff0/0xff0 [ 2411.075744] do_syscall_64+0x1d5/0x640 [ 2411.079635] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2411.084802] RIP: 0033:0x7ffa0bda9109 [ 2411.088489] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2411.096172] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2411.103419] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2411.110762] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2411.118012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2411.125257] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:26 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 43) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:26 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83200, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}, 0x0, 0x2000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x7c, 0x8000) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000000c0)=""/157) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83200, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}, 0x0, 0x2000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x7c, 0x8000) (async) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000000c0)=""/157) (async) 17:10:26 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x14100, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8a3}, [@exit]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x9f, &(0x7f00000000c0)=""/159, 0x41000, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0xd, 0x3, 0xfffffffb}, 0x10, 0x2461a, r1, 0x0, &(0x7f0000000200)}, 0x80) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000), 0x0) 17:10:26 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000080)={0xc}) 17:10:26 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$isdn_base(0x22, 0x3, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000040}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000b0300000000eaffffff000700000a0800034048000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x811) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000004c0)) (async) sendmsg$nl_netfilter(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0xf, 0x5, 0x101, 0x70bd28, 0x25dfdbfe, {0x3, 0x0, 0x8}, [@generic="cc84175db208fcd5da62ac9490611a0cc70445a05324f6f631b20fa8bc7687f5492cc169a9cc69977398922bc47552d729637995ef2ba3a61f458c90e9dc80df3a"]}, 0x58}, 0x1, 0x0, 0x0, 0x4014}, 0x41) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500), 0x501800, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x124, 0x1, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0x9e, 0x6, "69adde777d92531f6e55ddf61c18e172334795c1a43ab372801d677a693f7af57d998f91d168c4cb4fc284c92534f9684b1a9671d0ead8e888cc9b1f5dd222d328a625a70d59a8d7b64b1b1b9a21150e52a21039befd190aeca0f784a4d893cde6e286903e8a3068e1f92e2c26f7f958f9f4f129f960fb872b6558378d2ad440361e4df0039eb9123146a5d895e774b5f0409e41042ba6e3df9c"}, @NFTA_TABLE_USERDATA={0x5a, 0x6, "6456c2e7ca69f23d967c75c08c2f3d0d918dcb1fe0cc5975eb8d048376a9c160eebc9e296b0aa585e475ff85d9d96a234bbc4d330453efa805037ae1c819dc0d81aba5f91a2cde3a7f7ab1ab7c777dd6ea0323858678"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, 0x124}}, 0x800) (async, rerun: 32) socket(0x9f9e5eb5f9d2c933, 0x6, 0x400) (rerun: 32) 17:10:26 executing program 0: ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000200)) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES8=r0], 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x88d5) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x9, 0x6, 0x84087c439cf5a4b1, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x200}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1ff}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x801) 17:10:26 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000080)={0xc}) (rerun: 32) 17:10:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c044) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1a4, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x6c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x2}, @IPSET_ATTR_COMMENT={0xd, 0x1a, '$\\\'\'\xe1}@/\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x6}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xfffffffb}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x101}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6f49}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x401}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x24008881}, 0x4000c05) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 17:10:26 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x14100, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8a3}, [@exit]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x9f, &(0x7f00000000c0)=""/159, 0x41000, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0xd, 0x3, 0xfffffffb}, 0x10, 0x2461a, r1, 0x0, &(0x7f0000000200)}, 0x80) (async) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000), 0x0) 17:10:26 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x0, &(0x7f0000000000)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x10002, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x10020, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x200000000000, r0, 0x0) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="8c4a1726aa8d26b9b0e939ef01e9a3624eecc0c00a93bea8838ea6322f987bcdc1b43121b844b0f9c5828d6475eb9a25e190f0f7e43834c27373d860b38c15713f6d77f16026f774be05c86e84441ecca72aefd14bc19a7df52e7108c1f400cccd692b9ed6698575e48cf102dd77b0dd91ae7551573aaf4f3eb6e15dcf292edb8c9acca3936966601639f3b5060ed2499dd16978f20eb4d6121a1154414f3c49cbe45e500e9c77361a8e5cece2918d862da952a0caea6ba8cd4a792499fa387f357abf7791362d88e2ba112468d31276b3607c8d", 0xd4, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x1f, 0x1f, 0x0, 0x20, 0x0, 0xffffffffffffffff, 0x10200, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000280), 0xf}, 0x144, 0x3, 0x4, 0x3, 0x5, 0x1, 0x101, 0x0, 0x401, 0x0, 0x3}, r0, 0x1, r0, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000400)='memory.oom.group\x00', 0x2, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440), 0x10280, 0x0) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000680)={&(0x7f0000000480), 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x174, 0x4, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_CHAIN_USERDATA={0xae, 0xc, "bc8ac7e49c345921988ebbde76bddbd79ce94c833c04dd1d8fa960bfd78f3df71724fdc3a8174dd6ae57bc537f39617018f0584b09163caa8c5618b8bcc506b4f3616fbc3c791dd812cb39aae6f413ba81603d54d9e9980b6097e3387631726b95a106c10ec7d5fa9b81f57f3eecad8dc62e0ff9af75ad8c320cca5de3451bf69d6b3dacb1c4bf4ff6019638695fd0a0e127897fbd7f3f6f8a56237094ce3ad49c93f670d91d903a9c04"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3f25e8b8}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6erspan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x174}, 0x1, 0x0, 0x0, 0x800}, 0x20004040) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x6}) 17:10:26 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$isdn_base(0x22, 0x3, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)) (async) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000040}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000b0300000000eaffffff000700000a0800034048000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x811) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000004c0)) (async) sendmsg$nl_netfilter(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0xf, 0x5, 0x101, 0x70bd28, 0x25dfdbfe, {0x3, 0x0, 0x8}, [@generic="cc84175db208fcd5da62ac9490611a0cc70445a05324f6f631b20fa8bc7687f5492cc169a9cc69977398922bc47552d729637995ef2ba3a61f458c90e9dc80df3a"]}, 0x58}, 0x1, 0x0, 0x0, 0x4014}, 0x41) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500), 0x501800, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x124, 0x1, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0x9e, 0x6, "69adde777d92531f6e55ddf61c18e172334795c1a43ab372801d677a693f7af57d998f91d168c4cb4fc284c92534f9684b1a9671d0ead8e888cc9b1f5dd222d328a625a70d59a8d7b64b1b1b9a21150e52a21039befd190aeca0f784a4d893cde6e286903e8a3068e1f92e2c26f7f958f9f4f129f960fb872b6558378d2ad440361e4df0039eb9123146a5d895e774b5f0409e41042ba6e3df9c"}, @NFTA_TABLE_USERDATA={0x5a, 0x6, "6456c2e7ca69f23d967c75c08c2f3d0d918dcb1fe0cc5975eb8d048376a9c160eebc9e296b0aa585e475ff85d9d96a234bbc4d330453efa805037ae1c819dc0d81aba5f91a2cde3a7f7ab1ab7c777dd6ea0323858678"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, 0x124}}, 0x800) (async) socket(0x9f9e5eb5f9d2c933, 0x6, 0x400) [ 2411.265275] FAULT_INJECTION: forcing a failure. [ 2411.265275] name fail_page_alloc, interval 1, probability 0, space 0, times 0 17:10:26 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) (async) io_setup(0x0, &(0x7f0000000000)) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x10002, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x10020, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x200000000000, r0, 0x0) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="8c4a1726aa8d26b9b0e939ef01e9a3624eecc0c00a93bea8838ea6322f987bcdc1b43121b844b0f9c5828d6475eb9a25e190f0f7e43834c27373d860b38c15713f6d77f16026f774be05c86e84441ecca72aefd14bc19a7df52e7108c1f400cccd692b9ed6698575e48cf102dd77b0dd91ae7551573aaf4f3eb6e15dcf292edb8c9acca3936966601639f3b5060ed2499dd16978f20eb4d6121a1154414f3c49cbe45e500e9c77361a8e5cece2918d862da952a0caea6ba8cd4a792499fa387f357abf7791362d88e2ba112468d31276b3607c8d", 0xd4, 0x0) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x1f, 0x1f, 0x0, 0x20, 0x0, 0xffffffffffffffff, 0x10200, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000280), 0xf}, 0x144, 0x3, 0x4, 0x3, 0x5, 0x1, 0x101, 0x0, 0x401, 0x0, 0x3}, r0, 0x1, r0, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000400)='memory.oom.group\x00', 0x2, 0x0) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440), 0x10280, 0x0) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000680)={&(0x7f0000000480), 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x174, 0x4, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_CHAIN_USERDATA={0xae, 0xc, "bc8ac7e49c345921988ebbde76bddbd79ce94c833c04dd1d8fa960bfd78f3df71724fdc3a8174dd6ae57bc537f39617018f0584b09163caa8c5618b8bcc506b4f3616fbc3c791dd812cb39aae6f413ba81603d54d9e9980b6097e3387631726b95a106c10ec7d5fa9b81f57f3eecad8dc62e0ff9af75ad8c320cca5de3451bf69d6b3dacb1c4bf4ff6019638695fd0a0e127897fbd7f3f6f8a56237094ce3ad49c93f670d91d903a9c04"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3f25e8b8}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6erspan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x174}, 0x1, 0x0, 0x0, 0x800}, 0x20004040) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x6}) [ 2411.310470] CPU: 0 PID: 6305 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2411.318296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2411.327652] Call Trace: [ 2411.330288] dump_stack+0x1b2/0x281 [ 2411.333920] should_fail.cold+0x10a/0x149 [ 2411.338072] __alloc_pages_nodemask+0x22c/0x2720 [ 2411.342824] ? kasan_kmalloc+0xeb/0x160 [ 2411.346800] ? blk_mq_alloc_rq_map+0x113/0x220 [ 2411.351384] ? blk_mq_sched_alloc_tags+0xaa/0x240 [ 2411.356228] ? elevator_init+0x2ee/0x410 [ 2411.360320] ? loop_control_ioctl+0x161/0x3f0 [ 2411.364833] ? do_vfs_ioctl+0x75a/0xff0 [ 2411.368810] ? do_syscall_64+0x1d5/0x640 [ 2411.372958] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2411.378334] ? __mutex_unlock_slowpath+0x75/0x770 [ 2411.383186] ? fs_reclaim_release+0xd0/0x110 [ 2411.387594] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2411.392495] ? __lockdep_init_map+0x100/0x560 [ 2411.396980] ? _find_next_bit+0xdb/0x100 [ 2411.401032] ? __cpu_to_node+0x7b/0xa0 [ 2411.404983] ? memset+0x20/0x40 [ 2411.408242] blk_mq_alloc_rqs+0x227/0x6d0 [ 2411.412393] blk_mq_sched_alloc_tags+0x112/0x240 [ 2411.417149] blk_mq_init_sched+0x18d/0x4a0 [ 2411.421363] ? _raw_spin_unlock+0x29/0x40 [ 2411.425498] elevator_init+0x2ee/0x410 [ 2411.429366] blk_mq_sched_init+0x28/0x40 [ 2411.433406] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 2411.438849] blk_mq_init_queue+0x5a/0x90 [ 2411.442896] loop_add+0x303/0x830 [ 2411.446328] ? loop_queue_rq+0x280/0x280 [ 2411.450369] ? trace_hardirqs_on+0x10/0x10 [ 2411.454581] loop_control_ioctl+0x161/0x3f0 [ 2411.458878] ? loop_lookup+0x190/0x190 [ 2411.462743] ? SyS_write+0x1b7/0x210 [ 2411.466444] ? loop_lookup+0x190/0x190 [ 2411.470316] do_vfs_ioctl+0x75a/0xff0 [ 2411.474096] ? lock_acquire+0x170/0x3f0 [ 2411.478058] ? ioctl_preallocate+0x1a0/0x1a0 [ 2411.482453] ? __fget+0x265/0x3e0 [ 2411.485883] ? do_vfs_ioctl+0xff0/0xff0 [ 2411.489836] ? security_file_ioctl+0x83/0xb0 [ 2411.494229] SyS_ioctl+0x7f/0xb0 [ 2411.497574] ? do_vfs_ioctl+0xff0/0xff0 [ 2411.501529] do_syscall_64+0x1d5/0x640 [ 2411.505407] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2411.510573] RIP: 0033:0x7ffa0bda9109 [ 2411.514303] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2411.521988] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2411.529234] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2411.536483] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2411.543735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2411.550997] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:26 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 44) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:26 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) (async) io_setup(0x0, &(0x7f0000000000)) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x10002, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x10020, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x200000000000, r0, 0x0) (async) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="8c4a1726aa8d26b9b0e939ef01e9a3624eecc0c00a93bea8838ea6322f987bcdc1b43121b844b0f9c5828d6475eb9a25e190f0f7e43834c27373d860b38c15713f6d77f16026f774be05c86e84441ecca72aefd14bc19a7df52e7108c1f400cccd692b9ed6698575e48cf102dd77b0dd91ae7551573aaf4f3eb6e15dcf292edb8c9acca3936966601639f3b5060ed2499dd16978f20eb4d6121a1154414f3c49cbe45e500e9c77361a8e5cece2918d862da952a0caea6ba8cd4a792499fa387f357abf7791362d88e2ba112468d31276b3607c8d", 0xd4, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x1f, 0x1f, 0x0, 0x20, 0x0, 0xffffffffffffffff, 0x10200, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000280), 0xf}, 0x144, 0x3, 0x4, 0x3, 0x5, 0x1, 0x101, 0x0, 0x401, 0x0, 0x3}, r0, 0x1, r0, 0x2) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000400)='memory.oom.group\x00', 0x2, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440), 0x10280, 0x0) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000680)={&(0x7f0000000480), 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x174, 0x4, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_CHAIN_USERDATA={0xae, 0xc, "bc8ac7e49c345921988ebbde76bddbd79ce94c833c04dd1d8fa960bfd78f3df71724fdc3a8174dd6ae57bc537f39617018f0584b09163caa8c5618b8bcc506b4f3616fbc3c791dd812cb39aae6f413ba81603d54d9e9980b6097e3387631726b95a106c10ec7d5fa9b81f57f3eecad8dc62e0ff9af75ad8c320cca5de3451bf69d6b3dacb1c4bf4ff6019638695fd0a0e127897fbd7f3f6f8a56237094ce3ad49c93f670d91d903a9c04"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3f25e8b8}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6erspan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x174}, 0x1, 0x0, 0x0, 0x800}, 0x20004040) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x6}) 17:10:26 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x25) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x303, 0x0, 0x0, {0x0, 0x0, 0xa}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) 17:10:26 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x1}}], 0x18) r1 = socket$can_raw(0x1d, 0x3, 0x1) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x7ff, 0x1, 0x2, 0x1, 0x1}, 0x8) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0x21) 17:10:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c044) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1a4, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x6c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x2}, @IPSET_ATTR_COMMENT={0xd, 0x1a, '$\\\'\'\xe1}@/\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x6}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xfffffffb}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x101}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6f49}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x401}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x24008881}, 0x4000c05) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c044) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1a4, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x6c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x2}, @IPSET_ATTR_COMMENT={0xd, 0x1a, '$\\\'\'\xe1}@/\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x6}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xfffffffb}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x101}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6f49}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x401}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x24008881}, 0x4000c05) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) (async) 17:10:26 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000080)={0xc}) 17:10:27 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x25) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x303, 0x0, 0x0, {0x0, 0x0, 0xa}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) socket$isdn_base(0x22, 0x3, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000040)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x25) (async) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x303, 0x0, 0x0, {0x0, 0x0, 0xa}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) (async) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) (async) 17:10:27 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x1}}], 0x18) r1 = socket$can_raw(0x1d, 0x3, 0x1) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x7ff, 0x1, 0x2, 0x1, 0x1}, 0x8) (async) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0x21) 17:10:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c044) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1a4, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x6c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x2}, @IPSET_ATTR_COMMENT={0xd, 0x1a, '$\\\'\'\xe1}@/\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x6}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xfffffffb}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x101}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6f49}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x401}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x24008881}, 0x4000c05) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 17:10:27 executing program 5: semtimedop(0xffffffffffffffff, &(0x7f0000000080)=[{0x4, 0xfffa, 0x1800}], 0x1, &(0x7f00000000c0)={0x77359400}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:27 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r0}, 0x61) 17:10:27 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x1}}], 0x18) r1 = socket$can_raw(0x1d, 0x3, 0x1) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x7ff, 0x1, 0x2, 0x1, 0x1}, 0x8) (async) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0x21) [ 2411.694645] FAULT_INJECTION: forcing a failure. [ 2411.694645] name failslab, interval 1, probability 0, space 0, times 0 [ 2411.725087] CPU: 1 PID: 6353 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2411.733008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2411.742399] Call Trace: [ 2411.744992] dump_stack+0x1b2/0x281 [ 2411.748626] should_fail.cold+0x10a/0x149 [ 2411.752779] should_failslab+0xd6/0x130 [ 2411.756768] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2411.761877] elevator_alloc+0x7a/0x1f0 [ 2411.765775] dd_init_queue+0x20/0x420 [ 2411.769586] blk_mq_init_sched+0x214/0x4a0 [ 2411.773826] ? _raw_spin_unlock+0x29/0x40 [ 2411.777978] elevator_init+0x2ee/0x410 [ 2411.781881] blk_mq_sched_init+0x28/0x40 [ 2411.785926] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 2411.791034] blk_mq_init_queue+0x5a/0x90 [ 2411.795119] loop_add+0x303/0x830 [ 2411.798559] ? loop_queue_rq+0x280/0x280 [ 2411.802598] ? trace_hardirqs_on+0x10/0x10 [ 2411.807178] loop_control_ioctl+0x161/0x3f0 [ 2411.811505] ? loop_lookup+0x190/0x190 [ 2411.815389] ? SyS_write+0x1b7/0x210 [ 2411.819085] ? loop_lookup+0x190/0x190 [ 2411.822956] do_vfs_ioctl+0x75a/0xff0 [ 2411.826742] ? lock_acquire+0x170/0x3f0 [ 2411.830701] ? ioctl_preallocate+0x1a0/0x1a0 [ 2411.835094] ? __fget+0x265/0x3e0 [ 2411.838541] ? do_vfs_ioctl+0xff0/0xff0 [ 2411.842514] ? security_file_ioctl+0x83/0xb0 [ 2411.846901] SyS_ioctl+0x7f/0xb0 [ 2411.850256] ? do_vfs_ioctl+0xff0/0xff0 [ 2411.854257] do_syscall_64+0x1d5/0x640 [ 2411.858132] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2411.863316] RIP: 0033:0x7ffa0bda9109 [ 2411.867012] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2411.874701] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2411.881948] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 17:10:27 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 45) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:27 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@canfd={{0x1, 0x0, 0x1, 0x1}, 0x23, 0x3, 0x0, 0x0, "7f4be5eac20eb6756039e409d6e260e6653e90e6e807a24c8ff7d3b4786aa6995f1fbf4d8f943b41c58273dae24095d88e6e628c10d74133137a6560af8045ac"}, 0x48}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) 17:10:27 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r0}, 0x61) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r0}, 0x61) (async) 17:10:27 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x25) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x303, 0x0, 0x0, {0x0, 0x0, 0xa}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) socket$isdn_base(0x22, 0x3, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000040)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x25) (async) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x303, 0x0, 0x0, {0x0, 0x0, 0xa}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) (async) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) (async) 17:10:27 executing program 5: semtimedop(0xffffffffffffffff, &(0x7f0000000080)=[{0x4, 0xfffa, 0x1800}], 0x1, &(0x7f00000000c0)={0x77359400}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x0, 0xb, 0x801, 0x0, 0x0, {0x7}, [@NFTA_COMPAT_NAME={0x8, 0x1, '-\\,\x00'}, @NFTA_COMPAT_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_COMPAT_NAME={0x6, 0x1, '/\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x48810}, 0x40) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x5c, 0x4, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x42c1c8dc4fd1f28d}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x6a4dfee7e4d3bd8) [ 2411.889194] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2411.896469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2411.903777] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:27 executing program 5: semtimedop(0xffffffffffffffff, &(0x7f0000000080)=[{0x4, 0xfffa, 0x1800}], 0x1, &(0x7f00000000c0)={0x77359400}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:27 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r0}, 0x61) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r0}, 0x61) (async) 17:10:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)) (async) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x0, 0xb, 0x801, 0x0, 0x0, {0x7}, [@NFTA_COMPAT_NAME={0x8, 0x1, '-\\,\x00'}, @NFTA_COMPAT_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_COMPAT_NAME={0x6, 0x1, '/\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x48810}, 0x40) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x5c, 0x4, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x42c1c8dc4fd1f28d}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x6a4dfee7e4d3bd8) [ 2411.994864] FAULT_INJECTION: forcing a failure. [ 2411.994864] name failslab, interval 1, probability 0, space 0, times 0 [ 2412.017360] CPU: 0 PID: 6407 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2412.025266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2412.034617] Call Trace: [ 2412.037315] dump_stack+0x1b2/0x281 [ 2412.037331] should_fail.cold+0x10a/0x149 [ 2412.037345] should_failslab+0xd6/0x130 [ 2412.037361] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2412.049067] dd_init_queue+0x94/0x420 [ 2412.049083] blk_mq_init_sched+0x214/0x4a0 [ 2412.049092] ? _raw_spin_unlock+0x29/0x40 [ 2412.049106] elevator_init+0x2ee/0x410 [ 2412.062193] blk_mq_sched_init+0x28/0x40 [ 2412.062206] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 2412.062221] blk_mq_init_queue+0x5a/0x90 [ 2412.062230] loop_add+0x303/0x830 [ 2412.062239] ? loop_queue_rq+0x280/0x280 [ 2412.062248] ? trace_hardirqs_on+0x10/0x10 17:10:27 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@canfd={{0x1, 0x0, 0x1, 0x1}, 0x23, 0x3, 0x0, 0x0, "7f4be5eac20eb6756039e409d6e260e6653e90e6e807a24c8ff7d3b4786aa6995f1fbf4d8f943b41c58273dae24095d88e6e628c10d74133137a6560af8045ac"}, 0x48}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) 17:10:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10003, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x711}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000041) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:27 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) [ 2412.062261] loop_control_ioctl+0x161/0x3f0 [ 2412.099557] ? loop_lookup+0x190/0x190 [ 2412.099568] ? SyS_write+0x1b7/0x210 [ 2412.099581] ? loop_lookup+0x190/0x190 [ 2412.107157] do_vfs_ioctl+0x75a/0xff0 [ 2412.107169] ? lock_acquire+0x170/0x3f0 [ 2412.107180] ? ioctl_preallocate+0x1a0/0x1a0 [ 2412.107191] ? __fget+0x265/0x3e0 [ 2412.126725] ? do_vfs_ioctl+0xff0/0xff0 [ 2412.130707] ? security_file_ioctl+0x83/0xb0 [ 2412.135144] SyS_ioctl+0x7f/0xb0 [ 2412.138511] ? do_vfs_ioctl+0xff0/0xff0 [ 2412.142488] do_syscall_64+0x1d5/0x640 [ 2412.146488] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2412.151653] RIP: 0033:0x7ffa0bda9109 [ 2412.155345] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2412.163031] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2412.170277] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2412.177526] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2412.184887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 17:10:27 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 46) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10003, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x711}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000041) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10003, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x711}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000041) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) 17:10:27 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 17:10:27 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@canfd={{0x1, 0x0, 0x1, 0x1}, 0x23, 0x3, 0x0, 0x0, "7f4be5eac20eb6756039e409d6e260e6653e90e6e807a24c8ff7d3b4786aa6995f1fbf4d8f943b41c58273dae24095d88e6e628c10d74133137a6560af8045ac"}, 0x48}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) 17:10:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x0, 0xb, 0x801, 0x0, 0x0, {0x7}, [@NFTA_COMPAT_NAME={0x8, 0x1, '-\\,\x00'}, @NFTA_COMPAT_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_COMPAT_NAME={0x6, 0x1, '/\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x48810}, 0x40) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x5c, 0x4, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x42c1c8dc4fd1f28d}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x6a4dfee7e4d3bd8) 17:10:27 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_destroy(0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) io_submit(0x0, 0x2, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x5, 0xffffffffffffffff, &(0x7f0000000080)="e9897c3a12f936f0f463da2918e7999232a296ac885d430a2840ea0b74873d36e7e0656f7a9dbdebde2e9a6b816769495edd908e5da120741b19722d0303bfa53a2c3c9e01280176c8537c31fd8912439bb406659928b64d53d19ccb59ea2178c39d5fee48e1daf75ae67774e2578678b0f7b9b2b84152010767ac24b751506b3b18d502", 0x84, 0xaa6, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x9, r0, &(0x7f0000000180)="bede37b5821d931454fa96be51c2036568c968e57005d4d147cc9714b0283b88e394e8255ab79b578962992c71306df416d8df4c75a0d70ad13135cd7ca24d7d22041615474036122e582250cffae4abd219e866823ffadfb69680f09223b30a7d78f45d6ffd12899424439e53d5b09d07589dbc4289143ce8d38c637d17826cb820bd95ec26dc357012cd6750d021dc31d60898caacac6da6da40421469", 0x9e, 0x40, 0x0, 0x3, r1}]) [ 2412.192160] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10003, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x711}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000041) (async, rerun: 32) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 32) 17:10:27 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_destroy(0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) io_submit(0x0, 0x2, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x5, 0xffffffffffffffff, &(0x7f0000000080)="e9897c3a12f936f0f463da2918e7999232a296ac885d430a2840ea0b74873d36e7e0656f7a9dbdebde2e9a6b816769495edd908e5da120741b19722d0303bfa53a2c3c9e01280176c8537c31fd8912439bb406659928b64d53d19ccb59ea2178c39d5fee48e1daf75ae67774e2578678b0f7b9b2b84152010767ac24b751506b3b18d502", 0x84, 0xaa6, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x9, r0, &(0x7f0000000180)="bede37b5821d931454fa96be51c2036568c968e57005d4d147cc9714b0283b88e394e8255ab79b578962992c71306df416d8df4c75a0d70ad13135cd7ca24d7d22041615474036122e582250cffae4abd219e866823ffadfb69680f09223b30a7d78f45d6ffd12899424439e53d5b09d07589dbc4289143ce8d38c637d17826cb820bd95ec26dc357012cd6750d021dc31d60898caacac6da6da40421469", 0x9e, 0x40, 0x0, 0x3, r1}]) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) io_destroy(0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) io_submit(0x0, 0x2, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x5, 0xffffffffffffffff, &(0x7f0000000080)="e9897c3a12f936f0f463da2918e7999232a296ac885d430a2840ea0b74873d36e7e0656f7a9dbdebde2e9a6b816769495edd908e5da120741b19722d0303bfa53a2c3c9e01280176c8537c31fd8912439bb406659928b64d53d19ccb59ea2178c39d5fee48e1daf75ae67774e2578678b0f7b9b2b84152010767ac24b751506b3b18d502", 0x84, 0xaa6, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x9, r0, &(0x7f0000000180)="bede37b5821d931454fa96be51c2036568c968e57005d4d147cc9714b0283b88e394e8255ab79b578962992c71306df416d8df4c75a0d70ad13135cd7ca24d7d22041615474036122e582250cffae4abd219e866823ffadfb69680f09223b30a7d78f45d6ffd12899424439e53d5b09d07589dbc4289143ce8d38c637d17826cb820bd95ec26dc357012cd6750d021dc31d60898caacac6da6da40421469", 0x9e, 0x40, 0x0, 0x3, r1}]) (async) 17:10:27 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) getsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10) 17:10:27 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000080)=0x1, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 17:10:27 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) socket$isdn_base(0x22, 0x3, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) [ 2412.267472] FAULT_INJECTION: forcing a failure. [ 2412.267472] name failslab, interval 1, probability 0, space 0, times 0 [ 2412.292076] CPU: 1 PID: 6450 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2412.299903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2412.309255] Call Trace: [ 2412.311841] dump_stack+0x1b2/0x281 17:10:27 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) (async) getsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10) [ 2412.315481] should_fail.cold+0x10a/0x149 [ 2412.319648] should_failslab+0xd6/0x130 [ 2412.323625] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2412.328722] alloc_disk_node+0x5d/0x3d0 [ 2412.328736] loop_add+0x3cb/0x830 [ 2412.328746] ? loop_queue_rq+0x280/0x280 [ 2412.328756] ? trace_hardirqs_on+0x10/0x10 [ 2412.328769] loop_control_ioctl+0x161/0x3f0 [ 2412.328777] ? loop_lookup+0x190/0x190 [ 2412.344447] ? SyS_write+0x1b7/0x210 [ 2412.344463] ? loop_lookup+0x190/0x190 [ 2412.344474] do_vfs_ioctl+0x75a/0xff0 [ 2412.344485] ? lock_acquire+0x170/0x3f0 [ 2412.344494] ? ioctl_preallocate+0x1a0/0x1a0 [ 2412.356384] ? __fget+0x265/0x3e0 [ 2412.356398] ? do_vfs_ioctl+0xff0/0xff0 [ 2412.356410] ? security_file_ioctl+0x83/0xb0 [ 2412.356419] SyS_ioctl+0x7f/0xb0 [ 2412.356428] ? do_vfs_ioctl+0xff0/0xff0 [ 2412.391708] do_syscall_64+0x1d5/0x640 [ 2412.395604] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2412.401579] RIP: 0033:0x7ffa0bda9109 [ 2412.405280] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:10:27 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 47) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:27 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) 17:10:27 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x21) getsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10) 17:10:27 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_destroy(0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) io_submit(0x0, 0x2, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x5, 0xffffffffffffffff, &(0x7f0000000080)="e9897c3a12f936f0f463da2918e7999232a296ac885d430a2840ea0b74873d36e7e0656f7a9dbdebde2e9a6b816769495edd908e5da120741b19722d0303bfa53a2c3c9e01280176c8537c31fd8912439bb406659928b64d53d19ccb59ea2178c39d5fee48e1daf75ae67774e2578678b0f7b9b2b84152010767ac24b751506b3b18d502", 0x84, 0xaa6, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x9, r0, &(0x7f0000000180)="bede37b5821d931454fa96be51c2036568c968e57005d4d147cc9714b0283b88e394e8255ab79b578962992c71306df416d8df4c75a0d70ad13135cd7ca24d7d22041615474036122e582250cffae4abd219e866823ffadfb69680f09223b30a7d78f45d6ffd12899424439e53d5b09d07589dbc4289143ce8d38c637d17826cb820bd95ec26dc357012cd6750d021dc31d60898caacac6da6da40421469", 0x9e, 0x40, 0x0, 0x3, r1}]) 17:10:27 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000080)=0x1, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async) 17:10:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0xa, 0xa, 0x401, 0x0, 0x2, {0x1}}, 0x14}}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007b8a01040000000000004000000000030900020073797a30000000000500010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000200)={0x57, 0xfff8, 0x3, {0xfff8, 0x13c}, {0x20, 0x7ff}, @period={0x59, 0x9, 0x0, 0x0, 0x0, {0xd951, 0xffff, 0xb5de, 0x3}, 0x1, &(0x7f0000000000)=[0x2ad]}}) [ 2412.413074] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2412.420339] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2412.427606] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2412.434872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2412.442135] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:27 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 17:10:27 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) 17:10:27 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) 17:10:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0xa, 0xa, 0x401, 0x0, 0x2, {0x1}}, 0x14}}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007b8a01040000000000004000000000030900020073797a30000000000500010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000200)={0x57, 0xfff8, 0x3, {0xfff8, 0x13c}, {0x20, 0x7ff}, @period={0x59, 0x9, 0x0, 0x0, 0x0, {0xd951, 0xffff, 0xb5de, 0x3}, 0x1, &(0x7f0000000000)=[0x2ad]}}) 17:10:27 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x3, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x3}, {0x4, 0x0, 0x1, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1}}], 0x48) 17:10:27 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x7, 0x0, 0x6, 0x0, 0x8, 0x2000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xd158, 0x2, @perf_bp={&(0x7f0000000080), 0x5}, 0x5000, 0x3ff, 0x10000, 0x2, 0x7, 0x80000001, 0x0, 0x0, 0x8001, 0x0, 0x2}, 0xffffffffffffffff, 0x4, r0, 0x8) perf_event_open$cgroup(&(0x7f0000000180)={0x3, 0x80, 0x3f, 0x7, 0x9, 0x8, 0x0, 0x8, 0x10080, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x40404, 0x0, 0x20, 0x1, 0xffff, 0x2, 0x4000, 0x0, 0x9, 0x0, 0x80000001}, 0xffffffffffffffff, 0x6, r0, 0x6) [ 2412.529554] FAULT_INJECTION: forcing a failure. [ 2412.529554] name failslab, interval 1, probability 0, space 0, times 0 [ 2412.569596] CPU: 0 PID: 6493 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2412.577417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2412.586776] Call Trace: [ 2412.589369] dump_stack+0x1b2/0x281 [ 2412.592998] should_fail.cold+0x10a/0x149 [ 2412.597150] should_failslab+0xd6/0x130 [ 2412.601131] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2412.606249] __kmalloc_node+0x38/0x70 [ 2412.610144] disk_expand_part_tbl+0x17a/0x340 [ 2412.614642] alloc_disk_node+0xf1/0x3d0 [ 2412.618612] loop_add+0x3cb/0x830 [ 2412.622046] ? loop_queue_rq+0x280/0x280 [ 2412.626083] ? trace_hardirqs_on+0x10/0x10 [ 2412.630492] loop_control_ioctl+0x161/0x3f0 [ 2412.634812] ? loop_lookup+0x190/0x190 [ 2412.638797] ? SyS_write+0x1b7/0x210 [ 2412.642509] ? loop_lookup+0x190/0x190 [ 2412.646380] do_vfs_ioctl+0x75a/0xff0 [ 2412.650169] ? lock_acquire+0x170/0x3f0 [ 2412.654126] ? ioctl_preallocate+0x1a0/0x1a0 [ 2412.658519] ? __fget+0x265/0x3e0 [ 2412.661964] ? do_vfs_ioctl+0xff0/0xff0 [ 2412.665921] ? security_file_ioctl+0x83/0xb0 [ 2412.670308] SyS_ioctl+0x7f/0xb0 [ 2412.673652] ? do_vfs_ioctl+0xff0/0xff0 [ 2412.677606] do_syscall_64+0x1d5/0x640 [ 2412.681477] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2412.686652] RIP: 0033:0x7ffa0bda9109 [ 2412.690340] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2412.698036] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2412.705289] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2412.712627] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2412.719908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 17:10:28 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 48) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:28 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x3, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x3}, {0x4, 0x0, 0x1, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1}}], 0x48) 17:10:28 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x7, 0x0, 0x6, 0x0, 0x8, 0x2000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xd158, 0x2, @perf_bp={&(0x7f0000000080), 0x5}, 0x5000, 0x3ff, 0x10000, 0x2, 0x7, 0x80000001, 0x0, 0x0, 0x8001, 0x0, 0x2}, 0xffffffffffffffff, 0x4, r0, 0x8) perf_event_open$cgroup(&(0x7f0000000180)={0x3, 0x80, 0x3f, 0x7, 0x9, 0x8, 0x0, 0x8, 0x10080, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x40404, 0x0, 0x20, 0x1, 0xffff, 0x2, 0x4000, 0x0, 0x9, 0x0, 0x80000001}, 0xffffffffffffffff, 0x6, r0, 0x6) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x7, 0x0, 0x6, 0x0, 0x8, 0x2000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xd158, 0x2, @perf_bp={&(0x7f0000000080), 0x5}, 0x5000, 0x3ff, 0x10000, 0x2, 0x7, 0x80000001, 0x0, 0x0, 0x8001, 0x0, 0x2}, 0xffffffffffffffff, 0x4, r0, 0x8) (async) perf_event_open$cgroup(&(0x7f0000000180)={0x3, 0x80, 0x3f, 0x7, 0x9, 0x8, 0x0, 0x8, 0x10080, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x40404, 0x0, 0x20, 0x1, 0xffff, 0x2, 0x4000, 0x0, 0x9, 0x0, 0x80000001}, 0xffffffffffffffff, 0x6, r0, 0x6) (async) 17:10:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0xa, 0xa, 0x401, 0x0, 0x2, {0x1}}, 0x14}}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007b8a01040000000000004000000000030900020073797a30000000000500010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async, rerun: 64) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000200)={0x57, 0xfff8, 0x3, {0xfff8, 0x13c}, {0x20, 0x7ff}, @period={0x59, 0x9, 0x0, 0x0, 0x0, {0xd951, 0xffff, 0xb5de, 0x3}, 0x1, &(0x7f0000000000)=[0x2ad]}}) 17:10:28 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) 17:10:28 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) [ 2412.727157] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 17:10:28 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) r0 = socket(0x1d, 0x3, 0xffffffa8) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x3, 0x1, 0x1, 0x1}, {0x2}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1}, {0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x0, 0x1}}], 0x20) socket$isdn_base(0x22, 0x3, 0x0) 17:10:28 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) [ 2412.818294] FAULT_INJECTION: forcing a failure. [ 2412.818294] name failslab, interval 1, probability 0, space 0, times 0 [ 2412.836106] CPU: 1 PID: 6526 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2412.843932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2412.853371] Call Trace: [ 2412.855967] dump_stack+0x1b2/0x281 [ 2412.859601] should_fail.cold+0x10a/0x149 [ 2412.863760] should_failslab+0xd6/0x130 17:10:28 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) r0 = socket(0x1d, 0x3, 0xffffffa8) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x3, 0x1, 0x1, 0x1}, {0x2}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1}, {0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x0, 0x1}}], 0x20) (async) socket$isdn_base(0x22, 0x3, 0x0) [ 2412.867746] kmem_cache_alloc_trace+0x29a/0x3d0 [ 2412.872530] rand_initialize_disk+0x46/0xa9 [ 2412.876853] alloc_disk_node+0x1f7/0x3d0 [ 2412.876867] loop_add+0x3cb/0x830 [ 2412.876875] ? loop_queue_rq+0x280/0x280 [ 2412.876887] ? trace_hardirqs_on+0x10/0x10 [ 2412.884364] loop_control_ioctl+0x161/0x3f0 [ 2412.884372] ? loop_lookup+0x190/0x190 [ 2412.884380] ? SyS_write+0x1b7/0x210 [ 2412.884390] ? loop_lookup+0x190/0x190 [ 2412.884400] do_vfs_ioctl+0x75a/0xff0 [ 2412.884410] ? lock_acquire+0x170/0x3f0 [ 2412.884420] ? ioctl_preallocate+0x1a0/0x1a0 [ 2412.884432] ? __fget+0x265/0x3e0 [ 2412.884442] ? do_vfs_ioctl+0xff0/0xff0 [ 2412.884453] ? security_file_ioctl+0x83/0xb0 [ 2412.884463] SyS_ioctl+0x7f/0xb0 [ 2412.884470] ? do_vfs_ioctl+0xff0/0xff0 [ 2412.884481] do_syscall_64+0x1d5/0x640 [ 2412.884496] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2412.935882] RIP: 0033:0x7ffa0bda9109 [ 2412.943704] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2412.943715] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 17:10:28 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x7, 0x0, 0x6, 0x0, 0x8, 0x2000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xd158, 0x2, @perf_bp={&(0x7f0000000080), 0x5}, 0x5000, 0x3ff, 0x10000, 0x2, 0x7, 0x80000001, 0x0, 0x0, 0x8001, 0x0, 0x2}, 0xffffffffffffffff, 0x4, r0, 0x8) perf_event_open$cgroup(&(0x7f0000000180)={0x3, 0x80, 0x3f, 0x7, 0x9, 0x8, 0x0, 0x8, 0x10080, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x40404, 0x0, 0x20, 0x1, 0xffff, 0x2, 0x4000, 0x0, 0x9, 0x0, 0x80000001}, 0xffffffffffffffff, 0x6, r0, 0x6) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x7, 0x0, 0x6, 0x0, 0x8, 0x2000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xd158, 0x2, @perf_bp={&(0x7f0000000080), 0x5}, 0x5000, 0x3ff, 0x10000, 0x2, 0x7, 0x80000001, 0x0, 0x0, 0x8001, 0x0, 0x2}, 0xffffffffffffffff, 0x4, r0, 0x8) (async) perf_event_open$cgroup(&(0x7f0000000180)={0x3, 0x80, 0x3f, 0x7, 0x9, 0x8, 0x0, 0x8, 0x10080, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x40404, 0x0, 0x20, 0x1, 0xffff, 0x2, 0x4000, 0x0, 0x9, 0x0, 0x80000001}, 0xffffffffffffffff, 0x6, r0, 0x6) (async) 17:10:28 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x3, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x3}, {0x4, 0x0, 0x1, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1}}], 0x48) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x3, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x3}, {0x4, 0x0, 0x1, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1}}], 0x48) (async) 17:10:28 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:28 executing program 4: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x8, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x14, 0x401}, 0x0, 0x28, 0x20, 0x4, 0x0, 0x7, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 49) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:10:28 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) r0 = socket(0x1d, 0x3, 0xffffffa8) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x3, 0x1, 0x1, 0x1}, {0x2}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1}, {0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x0, 0x1}}], 0x20) socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) (async) socket(0x1d, 0x3, 0xffffffa8) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x3, 0x1, 0x1, 0x1}, {0x2}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1}, {0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x0, 0x1}}], 0x20) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) 17:10:28 executing program 5: sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40400d8) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0x3, 0x80, 0x6, 0x0, 0x3, 0x2c, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x401, 0x1, @perf_bp={&(0x7f0000000080), 0x2}, 0xe02a, 0x7fffffffffffffff, 0x6, 0x7, 0x7, 0xffff4f99, 0xfff, 0x0, 0x200}, 0xffffffffffffffff, 0x10, r0, 0x4) io_setup(0x1ff, &(0x7f0000000340)=0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440), 0x408002, 0x0) io_cancel(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xacfc, r1, &(0x7f0000000380)="e24d4de46022f95f51a934db6a184e1dc896988b0d9af9bb2c8b4e2f758538af35adb41f4bb751f3cc9000ead0bf211f370e98a50090dfdb02f2b20f417a3ff3b8d47c1dc788382202a3c991fee3e6ac8a40d5dda99570dc59dd348936bfcc46fb9af98c628856d0426aab691ad0e1a8b5afdfabe5ba58f6819e62670c9ea1f8517bf96b8977cccc3c4f3529aae7b6572f8938ce2b2ad8304cc39166a845b89478e5fb95236166c7bee00d24c5632634ec7ca5e7ab8adbe6", 0xb8, 0x80000000, 0x0, 0x2, r3}, &(0x7f00000004c0)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) openat$cgroup_int(r4, &(0x7f0000000300)='cpuacct.usage\x00', 0x2, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000140)=""/172) [ 2412.943721] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2412.943731] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2412.943735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2412.943740] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 [ 2413.149489] FAULT_INJECTION: forcing a failure. [ 2413.149489] name failslab, interval 1, probability 0, space 0, times 0 [ 2413.164972] CPU: 1 PID: 6568 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2413.172797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2413.182147] Call Trace: [ 2413.184746] dump_stack+0x1b2/0x281 [ 2413.188384] should_fail.cold+0x10a/0x149 [ 2413.192534] should_failslab+0xd6/0x130 [ 2413.196639] kmem_cache_alloc_trace+0x29a/0x3d0 [ 2413.201312] ? __lock_acquire+0x5fc/0x3f20 [ 2413.205560] device_create_groups_vargs+0x7b/0x250 [ 2413.210499] device_create_vargs+0x3a/0x50 [ 2413.214740] bdi_register_va.part.0+0x35/0x650 [ 2413.219329] bdi_register+0x101/0x110 [ 2413.223141] ? bdi_register_va+0x80/0x80 [ 2413.227206] ? vsnprintf+0x260/0x1340 [ 2413.231012] bdi_register_owner+0x59/0xf0 [ 2413.235508] device_add_disk+0x5bb/0xdc0 [ 2413.239597] ? sprintf+0xa7/0xd0 [ 2413.242961] ? blk_alloc_devt+0x310/0x310 [ 2413.247111] ? __lockdep_init_map+0x100/0x560 [ 2413.251606] ? __lockdep_init_map+0x100/0x560 [ 2413.256102] loop_add+0x615/0x830 [ 2413.259553] ? loop_queue_rq+0x280/0x280 [ 2413.263613] ? trace_hardirqs_on+0x10/0x10 [ 2413.267853] loop_control_ioctl+0x161/0x3f0 [ 2413.272176] ? loop_lookup+0x190/0x190 [ 2413.276063] ? SyS_write+0x1b7/0x210 [ 2413.279778] ? loop_lookup+0x190/0x190 [ 2413.283669] do_vfs_ioctl+0x75a/0xff0 [ 2413.287562] ? lock_acquire+0x170/0x3f0 [ 2413.291542] ? ioctl_preallocate+0x1a0/0x1a0 [ 2413.295956] ? __fget+0x265/0x3e0 [ 2413.299416] ? do_vfs_ioctl+0xff0/0xff0 [ 2413.303393] ? security_file_ioctl+0x83/0xb0 [ 2413.307806] SyS_ioctl+0x7f/0xb0 [ 2413.311172] ? do_vfs_ioctl+0xff0/0xff0 [ 2413.315150] do_syscall_64+0x1d5/0x640 [ 2413.319134] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2413.324937] RIP: 0033:0x7ffa0bda9109 [ 2413.328654] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2413.336373] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 17:10:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000a0a010400000000b9dcc4fb50cfaf30000000000100000065b4e035700d7d7405db31d6cf661c78dd5879755e167d10"], 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x124, 0x0, 0x2, 0x300, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_EXPECT_MASTER={0x6c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT={0x58, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}]}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xca0}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}]}, 0x124}, 0x1, 0x0, 0x0, 0x8800}, 0x6040040) 17:10:28 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba1b7a1dbf36a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0xb, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_COMPAT_NAME={0xf, 0x1, '/dev/nvram\x00'}, @NFTA_COMPAT_NAME={0x6, 0x1, '+\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_NAME={0xf, 0x1, '/dev/nvram\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40051}, 0xc020) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0xb, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xc67c}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfff}]}, 0x38}}, 0x40) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0x21) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x120, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) 17:10:28 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2db}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7461ca6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x944}, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000001c0), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000200), 0x4) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000002c0)=0x8, 0x8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="0000d8a2b0090001010400000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x41004}, 0xc1) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r3) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8000000, 0x40, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x65, 0x0, 0xfb, 0x4, 0x0, @empty, @multicast1, {[@generic={0x94, 0xc, "a5fc5e9dbd5196828bcb"}, @lsrr={0x83, 0x17, 0x1c, [@loopback, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0xb, 0x2e, [@loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x6, [{@empty, 0x9}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000c00)={&(0x7f0000000440), 0xc, &(0x7f0000000bc0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="40050000", @ANYRES16=r4, @ANYBLOB="000429bd7000fedbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000500000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000500000008000100", @ANYRES32=r5, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4400428040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050051be4039084203000b0000000800040006000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="c000028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700010000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c62cb1033d1686173685f746f5f70696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=r7, @ANYBLOB="180202803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2c0102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x540}, 0x1, 0x0, 0x0, 0x8090}, 0x4024050) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x1, 0x700, 0xfffffff7, 0xcb, {{0x29, 0x4, 0x2, 0x10, 0xa4, 0x68, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010102, @broadcast, {[@end, @noop, @rr={0x7, 0xf, 0xa3, [@private=0xa010102, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x42}]}, @ssrr={0x89, 0x2b, 0x52, [@broadcast, @broadcast, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x1b}, @broadcast, @multicast2, @local, @multicast1, @remote]}, @timestamp_addr={0x44, 0x2c, 0xdc, 0x1, 0x5, [{@multicast1, 0x1}, {@dev={0xac, 0x14, 0x14, 0x12}, 0xf92}, {@multicast2, 0x9}, {@multicast1, 0x5a}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x2}]}, @ssrr={0x89, 0xb, 0xdc, [@local, @multicast2]}, @generic={0x82, 0x9, "2e39aa8b263adc"}, @cipso={0x86, 0x12, 0x3, [{0x1, 0xc, "664e95888a07d27f0454"}]}, @end]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x118, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x80}, 0x20004840) socket$isdn_base(0x22, 0x3, 0x0) 17:10:28 executing program 5: sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40400d8) (async, rerun: 64) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 64) r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0x3, 0x80, 0x6, 0x0, 0x3, 0x2c, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x401, 0x1, @perf_bp={&(0x7f0000000080), 0x2}, 0xe02a, 0x7fffffffffffffff, 0x6, 0x7, 0x7, 0xffff4f99, 0xfff, 0x0, 0x200}, 0xffffffffffffffff, 0x10, r0, 0x4) io_setup(0x1ff, &(0x7f0000000340)=0x0) (async, rerun: 64) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440), 0x408002, 0x0) (rerun: 64) io_cancel(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xacfc, r1, &(0x7f0000000380)="e24d4de46022f95f51a934db6a184e1dc896988b0d9af9bb2c8b4e2f758538af35adb41f4bb751f3cc9000ead0bf211f370e98a50090dfdb02f2b20f417a3ff3b8d47c1dc788382202a3c991fee3e6ac8a40d5dda99570dc59dd348936bfcc46fb9af98c628856d0426aab691ad0e1a8b5afdfabe5ba58f6819e62670c9ea1f8517bf96b8977cccc3c4f3529aae7b6572f8938ce2b2ad8304cc39166a845b89478e5fb95236166c7bee00d24c5632634ec7ca5e7ab8adbe6", 0xb8, 0x80000000, 0x0, 0x2, r3}, &(0x7f00000004c0)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) (async) openat$cgroup_int(r4, &(0x7f0000000300)='cpuacct.usage\x00', 0x2, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000140)=""/172) [ 2413.343644] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2413.350914] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2413.358271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2413.365562] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 [ 2413.378180] kasan: CONFIG_KASAN_INLINE enabled [ 2413.383196] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 2413.390565] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 2413.396797] Modules linked in: [ 2413.399990] CPU: 1 PID: 6568 Comm: syz-executor.4 Not tainted 4.14.288-syzkaller #0 [ 2413.407872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2413.417224] task: ffff888092754380 task.stack: ffff888092810000 [ 2413.423281] RIP: 0010:sysfs_do_create_link_sd+0x56/0x120 [ 2413.426866] base_sock_release(ffff88807f957940) sk=ffff88807f7d3480 [ 2413.429064] RSP: 0018:ffff888092817b48 EFLAGS: 00010202 [ 2413.429072] RAX: dffffc0000000000 RBX: 0000000000000010 RCX: 0000000000004ec3 [ 2413.429077] RDX: 0000000000000008 RSI: 0000000000000001 RDI: 0000000000000040 [ 2413.429081] RBP: ffffffff87cbc860 R08: ffffffff8b9c8118 R09: 00000000000400cc [ 2413.429089] R10: ffff888092754c30 R11: ffff888092754380 R12: ffff8880aec95d20 [ 2413.437234] base_sock_release(ffff888088eb3900) sk=ffff8880988fce80 [ 2413.440820] R13: ffffffff87cbc860 R14: 0000000000000001 R15: ffff8880971a659c [ 2413.440828] FS: 00007ffa0a71e700(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 [ 2413.440833] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2413.440838] CR2: 00007ffa0a6fd718 CR3: 000000009c1fb000 CR4: 00000000003406e0 [ 2413.440846] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2413.483352] nft_compat: unsupported protocol 5 [ 2413.483732] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2413.483735] Call Trace: [ 2413.483753] sysfs_create_link+0x5f/0xc0 [ 2413.483766] device_add_disk+0x9f8/0xdc0 [ 2413.509507] base_sock_release(ffff888086e5a600) sk=ffff8880b4d02440 [ 2413.512370] ? sprintf+0xa7/0xd0 [ 2413.512379] ? blk_alloc_devt+0x310/0x310 [ 2413.512388] ? __lockdep_init_map+0x100/0x560 [ 2413.512396] ? __lockdep_init_map+0x100/0x560 [ 2413.512406] loop_add+0x615/0x830 [ 2413.512414] ? loop_queue_rq+0x280/0x280 [ 2413.512421] ? trace_hardirqs_on+0x10/0x10 [ 2413.512430] loop_control_ioctl+0x161/0x3f0 [ 2413.512437] ? loop_lookup+0x190/0x190 [ 2413.512444] ? SyS_write+0x1b7/0x210 [ 2413.512454] ? loop_lookup+0x190/0x190 [ 2413.543710] nft_compat: unsupported protocol 5 [ 2413.544683] do_vfs_ioctl+0x75a/0xff0 [ 2413.544695] ? lock_acquire+0x170/0x3f0 [ 2413.544705] ? ioctl_preallocate+0x1a0/0x1a0 [ 2413.563454] base_sock_release(ffff888087eaa9c0) sk=ffff88809e4ae880 [ 2413.565281] ? __fget+0x265/0x3e0 [ 2413.565292] ? do_vfs_ioctl+0xff0/0xff0 [ 2413.565304] ? security_file_ioctl+0x83/0xb0 [ 2413.569750] base_sock_release(ffff888088fd1a00) sk=ffff8880a9752300 [ 2413.575740] SyS_ioctl+0x7f/0xb0 [ 2413.575749] ? do_vfs_ioctl+0xff0/0xff0 [ 2413.575758] do_syscall_64+0x1d5/0x640 [ 2413.575769] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2413.575776] RIP: 0033:0x7ffa0bda9109 [ 2413.575780] RSP: 002b:00007ffa0a71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2413.575788] RAX: ffffffffffffffda RBX: 00007ffa0bebbf60 RCX: 00007ffa0bda9109 [ 2413.575792] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 2413.575795] RBP: 00007ffa0a71e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2413.575800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2413.575804] R13: 00007ffe4a30229f R14: 00007ffa0a71e300 R15: 0000000000022000 [ 2413.575811] Code: 84 a1 00 00 00 e8 [ 2413.586274] base_sock_release(ffff88807dd19a80) sk=ffff888087910480 [ 2413.587249] 9b 5b b1 ff 48 c7 c7 e0 d1 04 89 e8 df 01 [ 2413.611186] base_sock_release(ffff8880901f2a40) sk=ffff8880929a6e80 [ 2413.613773] 80 05 48 8d 7b 30 48 b8 00 [ 2413.617876] base_sock_release(ffff8880901f25c0) sk=ffff88808fe85340 [ 2413.622158] 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 a7 00 00 00 4c 8b 6b 30 4d 85 ed 74 4f e8 62 [ 2413.622240] RIP: sysfs_do_create_link_sd+0x56/0x120 RSP: ffff888092817b48 [ 2413.622279] ---[ end trace bebac402aee37bc3 ]--- [ 2413.747576] Kernel panic - not syncing: Fatal exception [ 2413.753324] Kernel Offset: disabled [ 2413.756942] Rebooting in 86400 seconds..