last executing test programs:

1m29.517569168s ago: executing program 3 (id=164):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00')
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/11, 0xb}], 0x1, 0x0, 0xa3e)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/scsi_host/host1/scan\x00', 0x1, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000280)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, &(0x7f00000002c0)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0xc2, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x4002, 0x1, 0xffff, 0x0, 0x1, 0x7, @private=0xa010100, @broadcast, {[@cipso={0x86, 0x77, 0x1, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x0, 0x9, "02270e000042eb"}, {0x2, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "00de6c83d50000"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x2, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/scsi_host/host0/link_power_management_policy\x00', 0x1, 0x0)
write(r4, &(0x7f0000000200)='max_performance', 0xf)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
fspick(r2, &(0x7f0000000240)='./sys\x00', 0x0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="57ca47a2b2de8826677a8ea9fb5e7ecaefa10c0500cff7931e85c8fd8fc719aec0b18b8de6b78a84a2ef6f0e6ef975fbdc7f68ebf19b0aac8c86e6147323e07a3167bd1caecb5a00b3cfd4cc3fdcab5ee5e1e5c57bb729354a6905ff4213fcbfe5cc6f9b1c3b9d60550cc8133e8db8b7c7b115edf26d0103d6f1550d6e25167a8d65bbe350f034e26769c551ad1a60f6f223", @ANYRES16=r5, @ANYBLOB="01002cbd7000fcdbdf25010000001400020077673000000000000000000000000000080005000100000088000880840000805c0009801c000080060001000200000008000200ac14141f05000300000000001c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac1414aa05000300030000000400008024000100"/178], 0xb8}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') (async)
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/11, 0xb}], 0x1, 0x0, 0xa3e) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/scsi_host/host1/scan\x00', 0x1, 0x0) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000280)=0x3, 0x4) (async)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, &(0x7f00000002c0)={0x1, 'veth0_to_team\x00'}, 0x18) (async)
syz_emit_ethernet(0xc2, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x4002, 0x1, 0xffff, 0x0, 0x1, 0x7, @private=0xa010100, @broadcast, {[@cipso={0x86, 0x77, 0x1, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x0, 0x9, "02270e000042eb"}, {0x2, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "00de6c83d50000"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x2, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/scsi_host/host0/link_power_management_policy\x00', 0x1, 0x0) (async)
write(r4, &(0x7f0000000200)='max_performance', 0xf) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) (async)
fspick(r2, &(0x7f0000000240)='./sys\x00', 0x0) (async)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="57ca47a2b2de8826677a8ea9fb5e7ecaefa10c0500cff7931e85c8fd8fc719aec0b18b8de6b78a84a2ef6f0e6ef975fbdc7f68ebf19b0aac8c86e6147323e07a3167bd1caecb5a00b3cfd4cc3fdcab5ee5e1e5c57bb729354a6905ff4213fcbfe5cc6f9b1c3b9d60550cc8133e8db8b7c7b115edf26d0103d6f1550d6e25167a8d65bbe350f034e26769c551ad1a60f6f223", @ANYRES16=r5, @ANYBLOB="01002cbd7000fcdbdf25010000001400020077673000000000000000000000000000080005000100000088000880840000805c0009801c000080060001000200000008000200ac14141f05000300000000001c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac1414aa05000300030000000400008024000100"/178], 0xb8}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)

1m29.449421746s ago: executing program 3 (id=167):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012"], 0x48}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000380)={0xf, 0x1f, 0x2, 0x1}, 0xf)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/18, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1m29.127079968s ago: executing program 3 (id=169):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x50, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4080)

1m29.103040852s ago: executing program 3 (id=172):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = syz_usbip_server_init(0x3)
write$usbip_server(r0, &(0x7f0000000140)=ANY=[], 0xffffff2b)
mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3c5093, 0x0)
umount2(&(0x7f0000000300)='./file0/file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async)
mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
syz_usbip_server_init(0x3) (async)
write$usbip_server(r0, &(0x7f0000000140)=ANY=[], 0xffffff2b) (async)
mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3c5093, 0x0) (async)
umount2(&(0x7f0000000300)='./file0/file0\x00', 0x0) (async)

1m28.532188218s ago: executing program 3 (id=176):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@local, 0x0, 0x3c}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = dup(r2)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
r5 = getpgid(0xffffffffffffffff)
syz_open_procfs$namespace(r5, &(0x7f0000000480)='ns/mnt\x00')
sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x44, r4, 0x205, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r4, 0x20, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}]}, 0x44}}, 0x800)

1m28.409422566s ago: executing program 3 (id=179):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@nested_set_state_pages={0x140, 0x28, {0x3, 0x14, @arbitrary=0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8000000000000001, 0x1, 0x1}}, @wr_drn={0x68, 0x20, {0x6, 0x8}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x32, @gpa=0x8080000}}, @cpuid={0x64, 0x18, {0x0, 0x6}}, @set_irq_handler={0xc8, 0x20, {0x2a, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x3}], 0x108})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1m28.3274576s ago: executing program 32 (id=179):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@nested_set_state_pages={0x140, 0x28, {0x3, 0x14, @arbitrary=0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8000000000000001, 0x1, 0x1}}, @wr_drn={0x68, 0x20, {0x6, 0x8}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x32, @gpa=0x8080000}}, @cpuid={0x64, 0x18, {0x0, 0x6}}, @set_irq_handler={0xc8, 0x20, {0x2a, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x3}], 0x108})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1m12.183584919s ago: executing program 4 (id=266):
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000002280)={0x7f, 0x4d, 0x2ba8, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f00000022c0), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000002300)={0x200, 0x4f, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000002340)={0x1, 0x3, 0x7})
r3 = syz_open_dev$dri(&(0x7f00000023c0), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000002400)={0x2, 0x4d, 0x2ba8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000002440)={0x1, 0x3, 0x9})
r4 = syz_open_dev$dri(&(0x7f0000002480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000024c0)={0x200, 0x51, 0x4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000002500)={r5})
r6 = syz_open_dev$dri(&(0x7f0000002540), 0xcaf8, 0x40000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000002580)={r1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000025c0)={0x7, 0x52a1, 0x1e})

1m12.125715116s ago: executing program 4 (id=267):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000080)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipmr_delroute={0x24, 0x19, 0x1, 0x70bd2c, 0x800000, {0x80, 0x20, 0x0, 0x40, 0x0, 0x4, 0x0, 0x5, 0x2400}, [@RTA_DST={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000)

1m12.038032568s ago: executing program 4 (id=268):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100001040000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012"], 0x48}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
ioctl$MEMREAD(0xffffffffffffffff, 0xc0404d1a, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', {0x6, 0x8b, 0x4ba}})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000380)={0xf, 0x1f, 0x2, 0x1}, 0xf)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1m11.827307086s ago: executing program 4 (id=274):
mkdirat(0xffffffffffffff9c, &(0x7f0000002700)='./file0\x00', 0x1f7)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x2000000000000216, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000b80)='.\x00', &(0x7f0000000bc0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000c00)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000c40)='./file0/../file0\x00', &(0x7f0000000c80)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)='./file0\x00', 0x0, 0x3c5093, 0x0)
umount2(&(0x7f0000000d40)='./file0/file0\x00', 0x0)
listen(r1, 0x5)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x10, 0x5, &(0x7f00000009c0)=ANY=[@ANYBLOB="b70200000af40000bfa3000000000000b704000000000000850000003f00000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a40)={@map=r2, r3, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000ac0), &(0x7f0000000b00)=@tcp=r1}, 0x20)
sendto(r1, &(0x7f0000000b40)="01", 0xffffffee, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00000095"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x20, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008920ccff0000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8e6273c9505a7ce1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000005"], &(0x7f0000000840)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount(&(0x7f0000002740)=@filename='mtd0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='jffs2\x00', 0x800000, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$sock(r4, &(0x7f00000003c0)={&(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x400000}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)="b671fe6e2f139a27daa87d65bfa202f54b3955558d6d0b2481c2698172c193d5", 0x20}, {&(0x7f00000000c0)="736ac7250a3880a7e287eee31e9ad298e702924a1a4fcfbe504abcf69401fafad305496d71ab0e63fa4dc64a6b6a26d8eae90565a099230cf6cdfbabca48ebbbe7f052b76f7a8589a826850601881be1a563d35c839f692c0d8675bcceb266f2dcc738893188026de54291d3b189951e551f8c7de17343d4dff85fc83e9c9470850af68af453", 0x86}, {&(0x7f0000000180)="8ed48e749fbafef86ef7d85c4ffea78addcaeb4e2fdfc26c88c40775e414c5f8e4130b458ae42ec55f311ff0fd5d2ef1135dd8304637c214732d50c9ea66016bead5a78b39d9c6ca71e13e8783c5f42f756ee33a28c2409c2a1a9d4f1fcdd079684a7dd3db0f145c2a3b0b303c2a91f986364ac9ae0d87574ddc0767d876bd60380d579efbedafd4b52c7531c73fd497", 0x90}, {&(0x7f0000000240)="f12d4af7684c7ab029a688cc4bd4fcc8664bad6d97ac85cf9533ee2a4d577dfd5974c954b1a80d897ad044c76a61ffde37b169c3fbf1e7c6ddb817700ccc21b9e06c9ba33332fcee0a5e594d7debef7cde20f29f803f2c6841f86541ec64b3306054b34e147d7bb32af439be78218e2bedd078243f27d0b5b3bffcdae849c670771a1e8f1795f4", 0x87}], 0x4, &(0x7f0000000340)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xa}}], 0x48}, 0x4004)

1m11.790937679s ago: executing program 4 (id=275):
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000002280)={0x7f, 0x4d, 0x2ba8, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f00000022c0), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000002300)={0x200, 0x4f, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000002340)={0x1, 0x3, 0x7})
r3 = syz_open_dev$dri(&(0x7f00000023c0), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000002400)={0x2, 0x4d, 0x2ba8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000002440)={0x1, 0x3, 0x9})
r4 = syz_open_dev$dri(&(0x7f0000002480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000024c0)={0x200, 0x51, 0x4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000002500)={r5})
r6 = syz_open_dev$dri(&(0x7f0000002540), 0xcaf8, 0x40000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000002580)={r1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000025c0)={0x7, 0x52a1, 0x1e})

1m11.439715237s ago: executing program 4 (id=283):
landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x0, 0x2}, 0x30, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf25250000000a0001007770616e31000000"], 0x20}, 0x1, 0x0, 0x0, 0x24008880}, 0x200108c0)

1m11.356803329s ago: executing program 33 (id=283):
landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x0, 0x2}, 0x30, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf25250000000a0001007770616e31000000"], 0x20}, 0x1, 0x0, 0x0, 0x24008880}, 0x200108c0)

6.443448994s ago: executing program 5 (id=1021):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8400, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}}})
ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@thin_pool={0x0, 0x2000, 0x0, 0x58, 'thin-pool\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '128'}}]})
ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}})
ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x168, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, {0x0, @thin_create={'create_thin '}}})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x5, 0x2, 0x1b1})
ioctl$DM_TABLE_STATUS(r0, 0xc138fd0c, &(0x7f0000000840)={0x4, 0x0, 0x0, 0x238, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, '\x00'/256})
ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, {0x0, @thin_pool='delete 0'}})
ioctl$DM_DEV_REMOVE(r0, 0xc138fd04, &(0x7f0000000c00)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}})

6.436654033s ago: executing program 5 (id=1022):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012"], 0x48}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

6.169486804s ago: executing program 5 (id=1024):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000380)={0xf, 0x1f, 0x2, 0x1}, 0xf)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

5.924197664s ago: executing program 5 (id=1026):
socket$inet(0x2, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
fanotify_init(0x20, 0x0)
fsopen(&(0x7f0000000000)='nfs\x00', 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000000a882, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}, 0x40000100)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r3 = gettid()
tkill(r3, 0x21)

3.106183143s ago: executing program 0 (id=1054):
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000002280)={0x7f, 0x4d, 0x2ba8, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f00000022c0), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000002300)={0x200, 0x4f, 0x4, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000002340)={0x1, 0x3, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000002380)={r3})
r4 = syz_open_dev$dri(&(0x7f00000023c0), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000002400)={0x2, 0x4d, 0x2ba8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000002440)={0x1, 0x3, 0x9})
r5 = syz_open_dev$dri(&(0x7f0000002480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000024c0)={0x200, 0x51, 0x4, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000002500)={r6})
r7 = syz_open_dev$dri(&(0x7f0000002540), 0xcaf8, 0x40000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000002580)={r1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, 0x0)

3.073798259s ago: executing program 5 (id=1055):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x44000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012"], 0x48}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000380)={0xf, 0x1f, 0x2, 0x1}, 0xf)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

3.054979274s ago: executing program 0 (id=1056):
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000003b80)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240000007050202400000070583030a"], 0x0)
rt_sigprocmask(0x2, &(0x7f0000000000)={[0xffffffffffffffff]}, 0x0, 0x8)
syz_clone3(&(0x7f0000000080)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
syz_clone3(&(0x7f0000000080)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x140, 0x0)
ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000100)={0x1, 0xe, 0xb, 0x1, @msf={0x8, 0x0, 0x4}, 0x4})
rt_sigtimedwait(&(0x7f0000000180)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8)
mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000140)=0x10, 0x0, 0x1)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x45, &(0x7f0000000100)=ANY=[]) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x45, &(0x7f0000000100)=ANY=[])

2.405337089s ago: executing program 5 (id=1063):
socket$inet(0x2, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
fanotify_init(0x20, 0x0)
fsopen(&(0x7f0000000000)='nfs\x00', 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000000a882, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, 0x0, 0x40000100)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r3 = gettid()
tkill(r3, 0x21)

2.046582085s ago: executing program 1 (id=1069):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012"], 0x48}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1.756508065s ago: executing program 1 (id=1070):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fcf000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"})
ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x9)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x34, r5, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c00}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, <r8=>0x0, 0x0, <r9=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r9, r4, <r10=>0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6, 0xca, 0x6, 0x2}, {0x1, 0x1, 0x9, 0x6}]})
ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r9, r10, <r11=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, &(0x7f0000000280)={0x20, r11, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1})
ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000300)={0x8, r11})
ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000340)={0x8, r10})
ioctl$IOMMU_GET_HW_INFO(r3, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r9, 0x1c, &(0x7f00000003c0)=""/28})
ioctl$IOMMU_DESTROY$stdev(r3, 0x3b80, &(0x7f0000000400)={0x8, r8})
ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000440)={0x8, r4})
ioctl$NILFS_IOCTL_SYNC(0xffffffffffffffff, 0x80086e8a, &(0x7f0000000580))
close(r3)

1.637405838s ago: executing program 0 (id=1071):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012"], 0x48}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000380)={0xf, 0x1f, 0x2, 0x1}, 0xf)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1.356046085s ago: executing program 0 (id=1072):
mkdir(&(0x7f0000000680)='./file0\x00', 0x0)
mkdir(&(0x7f00000006c0)='./bus\x00', 0x104)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x42, 0x0)
mount$overlay(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x8008, &(0x7f00000007c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000840)='./file1\x00', 0x88700, 0x36)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000400)={0x3c, r2, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x4b}}}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random=']'}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x2008010}, 0x10)
mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0)
r4 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
pread64(r5, &(0x7f0000000040)=""/73, 0x49, 0xa1)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={<r6=>0x0, @local}, &(0x7f0000000140)=0xc)
sendmsg$nl_route_sched(r5, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000180)=@getchain={0x64, 0x66, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xd, 0xd}, {0x9, 0xf}, {0x0, 0x3}}, [{0x8, 0xb, 0xe}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0xffffffff}, {0x8}, {0x8, 0xb, 0x80000001}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x9fd5}, {0x8, 0xb, 0x3}]}, 0x64}}, 0xc001)
ioctl$SET_ARRAY_INFO(r4, 0x40480923, &(0x7f0000000280)={0x0, 0x5a, 0x0, 0x0, 0x5, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000})
sendto$inet(0xffffffffffffffff, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, 0x0, 0x0)
write$binfmt_misc(r7, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r9 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, r9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ADD_NEW_DISK(r4, 0x40140921, &(0x7f0000000300)={0x0, {0x1, 0x0}, 0x0, 0x6})
ioctl$ADD_NEW_DISK(r4, 0x40140921, &(0x7f0000000340)={0x1, {0x1, 0x1}, 0x1, 0x6})
fanotify_mark(r0, 0x10, 0x8000010, r0, &(0x7f00000009c0)='./bus\x00')
ioctl$RUN_ARRAY(r4, 0x400c0930, &(0x7f0000000380))

1.134703036s ago: executing program 2 (id=1077):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) (fail_nth: 3)

1.049522431s ago: executing program 2 (id=1078):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@nested_set_state_pages={0x140, 0x28, {0x3, 0x14, @arbitrary=0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8000000000000001, 0x1, 0x1}}, @wr_drn={0x68, 0x20, {0x6, 0x8}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x32, @gpa=0x8080000}}, @cpuid={0x64, 0x18, {0x0, 0x6}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x54b, 0x4, 0x8f, 0x5}}, @set_irq_handler={0xc8, 0x20, {0x2a, 0x2}}], 0x128})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

987.107991ms ago: executing program 1 (id=1079):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012"], 0x48}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

938.827001ms ago: executing program 2 (id=1080):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@nested_set_state_pages={0x140, 0x28, {0x3, 0x14, @arbitrary=0x1}}, @wr_drn={0x68, 0x20, {0x6, 0x8}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x32, @gpa=0x8080000}}, @cpuid={0x64, 0x18, {0x0, 0x6}}, @set_irq_handler={0xc8, 0x20, {0x2a, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x3}], 0xd8})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

837.253515ms ago: executing program 0 (id=1081):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000600))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180))

740.715027ms ago: executing program 1 (id=1082):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@nested_set_state_pages={0x140, 0x28, {0x3, 0x14, @arbitrary=0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8000000000000001, 0x1, 0x1}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x0, 0x6}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x54b, 0x4, 0x8f, 0x5}}, @set_irq_handler={0xc8, 0x20, {0x2a, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x3}], 0xf8})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

615.660329ms ago: executing program 2 (id=1083):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x82c03, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @multicast})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000940)=@newtfilter={0x24, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x8080)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f00000007c0), 0x56)
sendmsg$kcm(r6, &(0x7f0000000800)={&(0x7f0000000840)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000900)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412a651d31adf00f3c300", 0x2e}, {0x0}], 0x2}, 0x4005)

511.536316ms ago: executing program 1 (id=1084):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640", @ANYRESHEX], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x30044803}, 0x20000040) (fail_nth: 1)

477.743632ms ago: executing program 1 (id=1085):
socket$unix(0x1, 0x5, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x3c}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r1, &(0x7f00000000c0)='1', 0x1)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r2, &(0x7f00000001c0)='1', 0x1)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

470.657092ms ago: executing program 2 (id=1093):
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x1})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', 0x1})
write$tun(r0, &(0x7f0000000340)=ANY=[], 0x97)

3.684306ms ago: executing program 0 (id=1086):
mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0)
r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0)
ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f0000000280)={0x0, 0x5a, 0x0, 0x0, 0x5, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000300)={0x800, {0x1, 0x0}, 0x0, 0x206})
ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000340)={0x1, {0x1, 0x1}, 0x1, 0x6})
ioctl$RUN_ARRAY(r0, 0x400c0930, &(0x7f0000000380))
pwrite64(r0, &(0x7f00000003c0)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x20, 0x1000)
pread64(r0, &(0x7f0000000400)=""/512, 0x200, 0x10000)
ioctl$STOP_ARRAY(r0, 0x932, 0x0)

0s ago: executing program 2 (id=1087):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a40)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x5, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x200001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c010)
r4 = socket$xdp(0x2c, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x6, &(0x7f0000000940)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x29e, &(0x7f0000000cc0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
bind$xdp(r2, &(0x7f0000000b40)={0x2c, 0xd, r1, 0x30, r4}, 0x10)
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000001c0)={<r7=>0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000280)={<r8=>r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000340)=0x84)
pipe(&(0x7f0000000500)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000540)=<r11=>0x0)
io_submit(r11, 0xf000, &(0x7f0000000580)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, r10, &(0x7f0000000640)='m', 0xfffffffffffffca1, 0x7}])
sendmmsg$inet_sctp(r5, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="30000000000000008408001b01000000000000018e"], 0x30, 0x8000}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000400)={0x4, 0x4, 0x2, 0x6, r8}, 0x10)
ioctl$SIOCX25GCALLUSERDATA(r5, 0x89e4, &(0x7f0000000440)={0x3e, "0a8e77285a151622e7d40cc46448151729f1afbb71c5072d297ac80ece6882a9b05eb5a773dcfcc1316b562bc9fa3abd89d2934cbc750508e3ffe881a1aab0f5a53f3bb06a0661d39f34fdd9eedd85e50258a5f5520c5ebd751191044293113e9cae041c3b7aa12addc79eb79c00beb66eb7a4745822a90a3ab961af70fab13e"})
r12 = socket$netlink(0x10, 0x3, 0xc)
setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000680)={r8, 0x2}, 0x8)
getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000700)={@local, <r13=>0x0}, &(0x7f0000000740)=0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'syztnl2\x00', <r14=>r1, 0x0, 0x7f, 0x4, 0x7fff, 0x24, @mcast2, @loopback, 0x40, 0x10, 0xcc, 0x8}})
sendmsg$ETHTOOL_MSG_EEE_GET(r10, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000b80)={0x108, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x10001}, 0x1)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newlink={0x20, 0x10, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14318}}, 0x20}, 0x1, 0x0, 0x0, 0x4000884}, 0x0)

kernel console output (not intermixed with test programs):

9677][ T1487] usb 6-1: USB disconnect, device number 9
[  154.992837][ T8660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=8660 comm=syz.1.771
[  154.992856][ T8660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=8660 comm=syz.1.771
[  154.992866][ T8660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=8660 comm=syz.1.771
[  154.992876][ T8660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=8660 comm=syz.1.771
[  154.992886][ T8660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=8660 comm=syz.1.771
[  154.992896][ T8660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=8660 comm=syz.1.771
[  154.992907][ T8660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=8660 comm=syz.1.771
[  154.992917][ T8660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=8660 comm=syz.1.771
[  155.042166][   T42] audit: type=1400 audit(1793096641.205:597): avc:  denied  { listen } for  pid=8659 comm="syz.1.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  155.063770][ T8666] FAULT_INJECTION: forcing a failure.
[  155.063770][ T8666] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  155.063803][ T8666] CPU: 1 UID: 0 PID: 8666 Comm: syz.5.773 Not tainted syzkaller #0 PREEMPT(full) 
[  155.063816][ T8666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  155.063823][ T8666] Call Trace:
[  155.063831][ T8666]  <TASK>
[  155.063836][ T8666]  dump_stack_lvl+0x100/0x190
[  155.063863][ T8666]  should_fail_ex.cold+0x5/0xa
[  155.063881][ T8666]  _copy_from_user+0x2e/0xd0
[  155.063907][ T8666]  copy_msghdr_from_user+0x9f/0x4c0
[  155.063927][ T8666]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  155.063945][ T8666]  ? lock_acquire+0x1d1/0x380
[  155.063967][ T8666]  ? get_pid_task+0x2a/0x250
[  155.063985][ T8666]  ___sys_sendmsg+0x106/0x1e0
[  155.064001][ T8666]  ? __pfx____sys_sendmsg+0x10/0x10
[  155.064016][ T8666]  ? get_pid_task+0x106/0x250
[  155.064037][ T8666]  ? find_held_lock+0x2b/0x80
[  155.064056][ T8666]  __sys_sendmsg+0x160/0x210
[  155.064068][ T8666]  ? __pfx___sys_sendmsg+0x10/0x10
[  155.064086][ T8666]  do_syscall_64+0x123/0x790
[  155.064109][ T8666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.064121][ T8666] RIP: 0033:0x7f3bcc59f559
[  155.064131][ T8666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  155.064142][ T8666] RSP: 002b:00007f3bcd40e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  155.064157][ T8666] RAX: ffffffffffffffda RBX: 00007f3bcc825fa0 RCX: 00007f3bcc59f559
[  155.064165][ T8666] RDX: 0000000020000040 RSI: 0000200000000200 RDI: 0000000000000003
[  155.064172][ T8666] RBP: 00007f3bcd40e090 R08: 0000000000000000 R09: 0000000000000000
[  155.064178][ T8666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  155.064185][ T8666] R13: 00007f3bcc826038 R14: 00007f3bcc825fa0 R15: 00007ffe22e89938
[  155.064199][ T8666]  </TASK>
[  155.124038][ T8668] loop0: detected capacity change from 0 to 1
[  155.171705][   T42] audit: type=1400 audit(1793096641.335:598): avc:  denied  { read write } for  pid=8667 comm="syz.1.774" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  155.171935][   T42] audit: type=1400 audit(1793096641.335:599): avc:  denied  { open } for  pid=8667 comm="syz.1.774" path="/186/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  155.172320][ T8668] mtrr: base(0x69662f2e000) is not aligned on a size(0x30656c000) boundary
[  155.172361][   T42] audit: type=1400 audit(1793096641.335:600): avc:  denied  { ioctl } for  pid=8667 comm="syz.1.774" path="/186/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x400c4d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  155.291837][   T42] audit: type=1400 audit(1793096641.455:601): avc:  denied  { ioctl } for  pid=8674 comm="syz.0.776" path="socket:[40831]" dev="sockfs" ino=40831 ioctlcmd=0xc0c89425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  155.292247][ T8676] netlink: 56 bytes leftover after parsing attributes in process `syz.0.776'.
[  155.648066][ T6687] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  155.674616][   T42] audit: type=1400 audit(1793096641.835:602): avc:  denied  { create } for  pid=8689 comm="syz.0.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  155.675682][   T42] audit: type=1400 audit(1793096641.835:603): avc:  denied  { setopt } for  pid=8689 comm="syz.0.782" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  155.774556][ T8693] netlink: 96 bytes leftover after parsing attributes in process `syz.0.783'.
[  155.798844][ T6687] usb 6-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00
[  155.800258][ T6687] usb 6-1: config 1 has an invalid interface number: 3 but max is 0
[  155.800279][ T6687] usb 6-1: config 1 has no interface number 0
[  155.803076][ T6687] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.803097][ T6687] usb 6-1: Product: syz
[  155.803111][ T6687] usb 6-1: Manufacturer: syz
[  155.803124][ T6687] usb 6-1: SerialNumber: syz
[  155.825212][ T6687] usb 6-1: 3:1 : does not exist
[  155.825234][ T6687] usb 6-1: 3:2 : does not exist
[  156.084344][ T8698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=8698 comm=syz.0.785
[  156.084363][ T8698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=8698 comm=syz.0.785
[  156.575402][ T6687] usb 6-1: USB disconnect, device number 10
[  156.876999][ T8718] nvme_fabrics: missing parameter 'transport=%s'
[  156.877015][ T8718] nvme_fabrics: missing parameter 'nqn=%s'
[  156.883592][ T8718] capability: warning: `syz.5.791' uses deprecated v2 capabilities in a way that may be insecure
[  156.992856][ T8728] FAULT_INJECTION: forcing a failure.
[  156.992856][ T8728] name failslab, interval 1, probability 0, space 0, times 0
[  156.992903][ T8728] CPU: 1 UID: 0 PID: 8728 Comm: syz.5.793 Not tainted syzkaller #0 PREEMPT(full) 
[  156.992927][ T8728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  156.992940][ T8728] Call Trace:
[  156.992948][ T8728]  <TASK>
[  156.992956][ T8728]  dump_stack_lvl+0x100/0x190
[  156.992999][ T8728]  should_fail_ex.cold+0x5/0xa
[  156.993028][ T8728]  should_failslab+0xc2/0x120
[  156.993069][ T8728]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  156.993104][ T8728]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  156.993139][ T8728]  ? alloc_pwq+0x58c/0x1450
[  156.993180][ T8728]  alloc_pwq+0x58c/0x1450
[  156.993210][ T8728]  apply_wqattrs_prepare+0x6cf/0x980
[  156.993242][ T8728]  __alloc_workqueue+0xdae/0x1900
[  156.993273][ T8728]  ? __mutex_unlock_slowpath+0x35d/0x930
[  156.993311][ T8728]  alloc_workqueue_noprof+0xc7/0x130
[  156.993338][ T8728]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  156.993369][ T8728]  ? __ceph_monc_want_map+0x189/0x360
[  156.993400][ T8728]  ? ceph_get_tree+0x399/0x1fd0
[  156.993435][ T8728]  ceph_get_tree+0x3fa/0x1fd0
[  156.993460][ T8728]  ? security_capable+0x80/0x260
[  156.993497][ T8728]  vfs_get_tree+0x92/0x320
[  156.993526][ T8728]  path_mount+0x7d0/0x2850
[  156.993560][ T8728]  ? __pfx_path_mount+0x10/0x10
[  156.993579][ T8728]  ? lockdep_hardirqs_on+0x7d/0x110
[  156.993608][ T8728]  ? putname+0xb1/0x110
[  156.993623][ T8728]  ? kmem_cache_free+0x127/0x6c0
[  156.993650][ T8728]  ? __x64_sys_mount+0x293/0x310
[  156.993670][ T8728]  __x64_sys_mount+0x293/0x310
[  156.993691][ T8728]  ? __pfx___x64_sys_mount+0x10/0x10
[  156.993718][ T8728]  do_syscall_64+0x123/0x790
[  156.993747][ T8728]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.993768][ T8728] RIP: 0033:0x7f3bcc59f559
[  156.993784][ T8728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  156.993803][ T8728] RSP: 002b:00007f3bcd40e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  156.993823][ T8728] RAX: ffffffffffffffda RBX: 00007f3bcc825fa0 RCX: 00007f3bcc59f559
[  156.993835][ T8728] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 00002000000005c0
[  156.993846][ T8728] RBP: 00007f3bcc636b20 R08: 0000000000000000 R09: 0000000000000000
[  156.993856][ T8728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  156.993866][ T8728] R13: 00007f3bcc826038 R14: 00007f3bcc825fa0 R15: 00007ffe22e89938
[  156.993890][ T8728]  </TASK>
[  157.105709][ T8736] FAULT_INJECTION: forcing a failure.
[  157.105709][ T8736] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  157.105737][ T8736] CPU: 3 UID: 0 PID: 8736 Comm: syz.0.796 Not tainted syzkaller #0 PREEMPT(full) 
[  157.105756][ T8736] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  157.105766][ T8736] Call Trace:
[  157.105771][ T8736]  <TASK>
[  157.105780][ T8736]  dump_stack_lvl+0x100/0x190
[  157.105812][ T8736]  should_fail_ex.cold+0x5/0xa
[  157.105836][ T8736]  _copy_from_user+0x2e/0xd0
[  157.105874][ T8736]  copy_msghdr_from_user+0x9f/0x4c0
[  157.105903][ T8736]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  157.105948][ T8736]  ? lock_acquire+0x1d1/0x380
[  157.105985][ T8736]  ? get_pid_task+0x2a/0x250
[  157.106011][ T8736]  ___sys_sendmsg+0x106/0x1e0
[  157.106033][ T8736]  ? __pfx____sys_sendmsg+0x10/0x10
[  157.106055][ T8736]  ? get_pid_task+0x106/0x250
[  157.106087][ T8736]  ? find_held_lock+0x2b/0x80
[  157.106118][ T8736]  __sys_sendmsg+0x160/0x210
[  157.106137][ T8736]  ? __pfx___sys_sendmsg+0x10/0x10
[  157.106165][ T8736]  do_syscall_64+0x123/0x790
[  157.106194][ T8736]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.106211][ T8736] RIP: 0033:0x7fb44c99f559
[  157.106226][ T8736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  157.106242][ T8736] RSP: 002b:00007fb44d877028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  157.106260][ T8736] RAX: ffffffffffffffda RBX: 00007fb44cc25fa0 RCX: 00007fb44c99f559
[  157.106274][ T8736] RDX: 0000000000008080 RSI: 0000200000002ec0 RDI: 0000000000000003
[  157.106283][ T8736] RBP: 00007fb44d877090 R08: 0000000000000000 R09: 0000000000000000
[  157.106300][ T8736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  157.106309][ T8736] R13: 00007fb44cc26038 R14: 00007fb44cc25fa0 R15: 00007ffe666e2648
[  157.106333][ T8736]  </TASK>
[  157.107346][ T8735] netlink: 12 bytes leftover after parsing attributes in process `syz.5.795'.
[  157.131383][ T8735] 8021q: adding VLAN 0 to HW filter on device bond2
[  157.148346][ T8735] bond2: (slave hsr0): The slave device specified does not support setting the MAC address
[  157.148850][ T8735] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  157.148869][ T8735] bond2: (slave hsr0): Error -22 calling dev_set_mtu
[  157.637344][ T8753] FAULT_INJECTION: forcing a failure.
[  157.637344][ T8753] name failslab, interval 1, probability 0, space 0, times 0
[  157.637404][ T8753] CPU: 3 UID: 0 PID: 8753 Comm: syz.1.802 Not tainted syzkaller #0 PREEMPT(full) 
[  157.637426][ T8753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  157.637436][ T8753] Call Trace:
[  157.637458][ T8753]  <TASK>
[  157.637466][ T8753]  dump_stack_lvl+0x100/0x190
[  157.637548][ T8753]  should_fail_ex.cold+0x5/0xa
[  157.637578][ T8753]  should_failslab+0xc2/0x120
[  157.637616][ T8753]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  157.637653][ T8753]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  157.637691][ T8753]  ? alloc_pwq+0x58c/0x1450
[  157.637715][ T8753]  alloc_pwq+0x58c/0x1450
[  157.637743][ T8753]  apply_wqattrs_prepare+0x6cf/0x980
[  157.637770][ T8753]  __alloc_workqueue+0xdae/0x1900
[  157.637800][ T8753]  ? __mutex_unlock_slowpath+0x35d/0x930
[  157.637860][ T8753]  alloc_workqueue_noprof+0xc7/0x130
[  157.637886][ T8753]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  157.637934][ T8753]  ? __ceph_monc_want_map+0x189/0x360
[  157.637966][ T8753]  ? ceph_get_tree+0x399/0x1fd0
[  157.638003][ T8753]  ceph_get_tree+0x3fa/0x1fd0
[  157.638027][ T8753]  ? security_capable+0x80/0x260
[  157.638065][ T8753]  vfs_get_tree+0x92/0x320
[  157.638096][ T8753]  path_mount+0x7d0/0x2850
[  157.638131][ T8753]  ? __pfx_path_mount+0x10/0x10
[  157.638150][ T8753]  ? lockdep_hardirqs_on+0x7d/0x110
[  157.638181][ T8753]  ? putname+0xb1/0x110
[  157.638202][ T8753]  ? kmem_cache_free+0x127/0x6c0
[  157.638230][ T8753]  ? __x64_sys_mount+0x293/0x310
[  157.638251][ T8753]  __x64_sys_mount+0x293/0x310
[  157.638272][ T8753]  ? __pfx___x64_sys_mount+0x10/0x10
[  157.638300][ T8753]  do_syscall_64+0x123/0x790
[  157.638330][ T8753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.638349][ T8753] RIP: 0033:0x7f6f9819f559
[  157.638364][ T8753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  157.638381][ T8753] RSP: 002b:00007f6f99111028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  157.638420][ T8753] RAX: ffffffffffffffda RBX: 00007f6f98425fa0 RCX: 00007f6f9819f559
[  157.638432][ T8753] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 00002000000005c0
[  157.638446][ T8753] RBP: 00007f6f98236b20 R08: 0000000000000000 R09: 0000000000000000
[  157.638457][ T8753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  157.638473][ T8753] R13: 00007f6f98426038 R14: 00007f6f98425fa0 R15: 00007ffe136268f8
[  157.638498][ T8753]  </TASK>
[  157.696049][ T8759] netlink: 28 bytes leftover after parsing attributes in process `syz.5.803'.
[  157.998196][ T5874] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  158.178895][ T5874] usb 10-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00
[  158.180598][ T5874] usb 10-1: config 1 has an invalid interface number: 3 but max is 0
[  158.180617][ T5874] usb 10-1: config 1 has no interface number 0
[  158.184173][ T5874] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.184191][ T5874] usb 10-1: Product: syz
[  158.184202][ T5874] usb 10-1: Manufacturer: syz
[  158.184213][ T5874] usb 10-1: SerialNumber: syz
[  158.195057][ T5874] usb 10-1: 3:1 : does not exist
[  158.195069][ T5874] usb 10-1: 3:2 : does not exist
[  158.660020][ T8791] FAULT_INJECTION: forcing a failure.
[  158.660020][ T8791] name failslab, interval 1, probability 0, space 0, times 0
[  158.660083][ T8791] CPU: 3 UID: 0 PID: 8791 Comm: syz.1.812 Not tainted syzkaller #0 PREEMPT(full) 
[  158.660109][ T8791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  158.660121][ T8791] Call Trace:
[  158.660144][ T8791]  <TASK>
[  158.660153][ T8791]  dump_stack_lvl+0x100/0x190
[  158.660244][ T8791]  should_fail_ex.cold+0x5/0xa
[  158.660275][ T8791]  should_failslab+0xc2/0x120
[  158.660318][ T8791]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  158.660352][ T8791]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  158.660389][ T8791]  ? alloc_pwq+0x58c/0x1450
[  158.660415][ T8791]  alloc_pwq+0x58c/0x1450
[  158.660444][ T8791]  apply_wqattrs_prepare+0x6cf/0x980
[  158.660470][ T8791]  __alloc_workqueue+0xdae/0x1900
[  158.660500][ T8791]  ? __mutex_unlock_slowpath+0x35d/0x930
[  158.660555][ T8791]  alloc_workqueue_noprof+0xc7/0x130
[  158.660581][ T8791]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  158.660613][ T8791]  ? __ceph_monc_want_map+0x189/0x360
[  158.660644][ T8791]  ? ceph_get_tree+0x399/0x1fd0
[  158.660680][ T8791]  ceph_get_tree+0x3fa/0x1fd0
[  158.660705][ T8791]  ? security_capable+0x80/0x260
[  158.660741][ T8791]  vfs_get_tree+0x92/0x320
[  158.660771][ T8791]  path_mount+0x7d0/0x2850
[  158.660817][ T8791]  ? __pfx_path_mount+0x10/0x10
[  158.660839][ T8791]  ? lockdep_hardirqs_on+0x7d/0x110
[  158.660872][ T8791]  ? putname+0xb1/0x110
[  158.660887][ T8791]  ? kmem_cache_free+0x127/0x6c0
[  158.660915][ T8791]  ? __x64_sys_mount+0x293/0x310
[  158.660935][ T8791]  __x64_sys_mount+0x293/0x310
[  158.660957][ T8791]  ? __pfx___x64_sys_mount+0x10/0x10
[  158.660977][ T8791]  ? anon_inode_getfd+0x3c/0xc0
[  158.661020][ T8791]  do_syscall_64+0x123/0x790
[  158.661048][ T8791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.661067][ T8791] RIP: 0033:0x7f6f9819f559
[  158.661083][ T8791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  158.661100][ T8791] RSP: 002b:00007f6f99111028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  158.661131][ T8791] RAX: ffffffffffffffda RBX: 00007f6f98425fa0 RCX: 00007f6f9819f559
[  158.661144][ T8791] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 00002000000005c0
[  158.661156][ T8791] RBP: 00007f6f98236b20 R08: 0000000000000000 R09: 0000000000000000
[  158.661167][ T8791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  158.661203][ T8791] R13: 00007f6f98426038 R14: 00007f6f98425fa0 R15: 00007ffe136268f8
[  158.661232][ T8791]  </TASK>
[  158.960801][ T5874] usb 10-1: USB disconnect, device number 10
[  159.456993][ T8816] i2c i2c-0: new_device: Missing parameters
[  159.677193][ T8824] FAULT_INJECTION: forcing a failure.
[  159.677193][ T8824] name failslab, interval 1, probability 0, space 0, times 0
[  159.677222][ T8824] CPU: 3 UID: 0 PID: 8824 Comm: syz.0.821 Not tainted syzkaller #0 PREEMPT(full) 
[  159.677235][ T8824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  159.677242][ T8824] Call Trace:
[  159.677255][ T8824]  <TASK>
[  159.677260][ T8824]  dump_stack_lvl+0x100/0x190
[  159.677320][ T8824]  should_fail_ex.cold+0x5/0xa
[  159.677339][ T8824]  should_failslab+0xc2/0x120
[  159.677364][ T8824]  __kmalloc_noprof+0xfc/0x840
[  159.677385][ T8824]  ? apply_wqattrs_prepare+0xf8/0x980
[  159.677402][ T8824]  apply_wqattrs_prepare+0xf8/0x980
[  159.677418][ T8824]  __alloc_workqueue+0xdae/0x1900
[  159.677436][ T8824]  ? __mutex_unlock_slowpath+0x35d/0x930
[  159.677471][ T8824]  alloc_workqueue_noprof+0xc7/0x130
[  159.677486][ T8824]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  159.677520][ T8824]  ? __ceph_monc_want_map+0x189/0x360
[  159.677541][ T8824]  ? ceph_get_tree+0x399/0x1fd0
[  159.677563][ T8824]  ceph_get_tree+0x3fa/0x1fd0
[  159.677576][ T8824]  ? security_capable+0x80/0x260
[  159.677599][ T8824]  vfs_get_tree+0x92/0x320
[  159.677617][ T8824]  path_mount+0x7d0/0x2850
[  159.677640][ T8824]  ? __pfx_path_mount+0x10/0x10
[  159.677651][ T8824]  ? lockdep_hardirqs_on+0x7d/0x110
[  159.677669][ T8824]  ? putname+0xb1/0x110
[  159.677678][ T8824]  ? kmem_cache_free+0x127/0x6c0
[  159.677693][ T8824]  ? __x64_sys_mount+0x293/0x310
[  159.677704][ T8824]  __x64_sys_mount+0x293/0x310
[  159.677717][ T8824]  ? __pfx___x64_sys_mount+0x10/0x10
[  159.677734][ T8824]  do_syscall_64+0x123/0x790
[  159.677752][ T8824]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.677765][ T8824] RIP: 0033:0x7fb44c99f559
[  159.677782][ T8824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  159.677793][ T8824] RSP: 002b:00007fb44d877028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  159.677814][ T8824] RAX: ffffffffffffffda RBX: 00007fb44cc25fa0 RCX: 00007fb44c99f559
[  159.677820][ T8824] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 00002000000005c0
[  159.677827][ T8824] RBP: 00007fb44ca36b20 R08: 0000000000000000 R09: 0000000000000000
[  159.677833][ T8824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  159.677840][ T8824] R13: 00007fb44cc26038 R14: 00007fb44cc25fa0 R15: 00007ffe666e2648
[  159.677855][ T8824]  </TASK>
[  160.149606][ T8842] FAULT_INJECTION: forcing a failure.
[  160.149606][ T8842] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  160.149684][ T8842] CPU: 3 UID: 0 PID: 8842 Comm: syz.1.826 Not tainted syzkaller #0 PREEMPT(full) 
[  160.149706][ T8842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  160.149717][ T8842] Call Trace:
[  160.149723][ T8842]  <TASK>
[  160.149730][ T8842]  dump_stack_lvl+0x100/0x190
[  160.149776][ T8842]  should_fail_ex.cold+0x5/0xa
[  160.149799][ T8842]  ? prepare_alloc_pages+0x16d/0x5b0
[  160.149848][ T8842]  should_fail_alloc_page+0xeb/0x140
[  160.149885][ T8842]  prepare_alloc_pages+0x1f0/0x5b0
[  160.149911][ T8842]  ? is_bpf_text_address+0x94/0x1a0
[  160.149945][ T8842]  __alloc_frozen_pages_noprof+0x1ee/0x3190
[  160.149979][ T8842]  ? stack_trace_save+0x8e/0xc0
[  160.150011][ T8842]  ? __pfx_stack_trace_save+0x10/0x10
[  160.150034][ T8842]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  160.150059][ T8842]  ? kasan_save_stack+0x3f/0x50
[  160.150081][ T8842]  ? kasan_save_stack+0x30/0x50
[  160.150102][ T8842]  ? kasan_save_track+0x14/0x30
[  160.150123][ T8842]  ? __kasan_slab_alloc+0x89/0x90
[  160.150153][ T8842]  ? kmem_cache_alloc_node_noprof+0x282/0x6e0
[  160.150176][ T8842]  ? alloc_vmap_area+0x643/0x2bc0
[  160.150197][ T8842]  ? __get_vm_area_node+0x1ed/0x350
[  160.150219][ T8842]  ? __vmalloc_node_range_noprof+0x2ad/0x1440
[  160.150244][ T8842]  ? __vmalloc_node_noprof+0xad/0xf0
[  160.150267][ T8842]  ? __vmalloc_noprof+0xa3/0x120
[  160.150290][ T8842]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  160.150306][ T8842]  ? bpf_prog_alloc+0x3b/0x200
[  160.150321][ T8842]  ? bpf_prog_load+0x513/0x2ba0
[  160.150344][ T8842]  ? __sys_bpf+0x146f/0x4b60
[  160.150371][ T8842]  ? __x64_sys_bpf+0xce/0x140
[  160.150395][ T8842]  ? do_syscall_64+0x123/0x790
[  160.150426][ T8842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.150455][ T8842]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  160.150493][ T8842]  ? policy_nodemask+0xed/0x4f0
[  160.150523][ T8842]  alloc_pages_mpol+0x201/0x560
[  160.150551][ T8842]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  160.150584][ T8842]  alloc_pages_noprof+0x1a/0x160
[  160.150603][ T8842]  get_free_pages_noprof+0x10/0xb0
[  160.150650][ T8842]  __kasan_populate_vmalloc+0xa0/0x210
[  160.150678][ T8842]  alloc_vmap_area+0x963/0x2bc0
[  160.150709][ T8842]  ? kasan_save_track+0x14/0x30
[  160.150730][ T8842]  ? __kasan_kmalloc+0xaa/0xb0
[  160.150752][ T8842]  ? __pfx_alloc_vmap_area+0x10/0x10
[  160.150776][ T8842]  ? __get_vm_area_node+0x124/0x350
[  160.150803][ T8842]  __get_vm_area_node+0x1ed/0x350
[  160.150831][ T8842]  __vmalloc_node_range_noprof+0x2ad/0x1440
[  160.150857][ T8842]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  160.150874][ T8842]  ? __lock_acquire+0x5c0/0x1f40
[  160.150914][ T8842]  ? process_measurement+0x2ec/0x2350
[  160.150944][ T8842]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  160.150963][ T8842]  ? lock_acquire+0x1d1/0x380
[  160.150987][ T8842]  ? find_held_lock+0x2b/0x80
[  160.151004][ T8842]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  160.151032][ T8842]  ? avc_has_perm_noaudit+0x11e/0x470
[  160.151070][ T8842]  ? avc_has_perm_noaudit+0x145/0x470
[  160.151094][ T8842]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  160.151112][ T8842]  __vmalloc_node_noprof+0xad/0xf0
[  160.151136][ T8842]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  160.151157][ T8842]  __vmalloc_noprof+0xa3/0x120
[  160.151182][ T8842]  ? __pfx___vmalloc_noprof+0x10/0x10
[  160.151209][ T8842]  ? rcu_is_watching+0x13/0xc0
[  160.151228][ T8842]  ? cap_capable+0x107/0x430
[  160.151255][ T8842]  bpf_prog_alloc_no_stats+0x59/0x690
[  160.151272][ T8842]  ? security_capable+0x80/0x260
[  160.151298][ T8842]  bpf_prog_alloc+0x3b/0x200
[  160.151314][ T8842]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  160.151341][ T8842]  bpf_prog_load+0x513/0x2ba0
[  160.151369][ T8842]  ? avc_has_perm_noaudit+0x11e/0x470
[  160.151398][ T8842]  ? __pfx_bpf_prog_load+0x10/0x10
[  160.151444][ T8842]  __sys_bpf+0x146f/0x4b60
[  160.151475][ T8842]  ? __pfx___sys_bpf+0x10/0x10
[  160.151499][ T8842]  ? find_held_lock+0x2b/0x80
[  160.151515][ T8842]  ? get_pid_task+0xfc/0x250
[  160.151540][ T8842]  ? get_pid_task+0xfc/0x250
[  160.151573][ T8842]  ? find_held_lock+0x2b/0x80
[  160.151596][ T8842]  ? rcu_read_lock_any_held+0x6a/0x90
[  160.151615][ T8842]  ? find_held_lock+0x2b/0x80
[  160.151632][ T8842]  ? ksys_write+0x190/0x250
[  160.151664][ T8842]  ? ksys_write+0x190/0x250
[  160.151686][ T8842]  ? lock_acquire+0x1d1/0x380
[  160.151725][ T8842]  ? fput+0x7c/0x100
[  160.151752][ T8842]  ? ksys_write+0x1ac/0x250
[  160.151776][ T8842]  ? __x64_sys_bpf+0xce/0x140
[  160.151800][ T8842]  __x64_sys_bpf+0xce/0x140
[  160.151826][ T8842]  ? do_syscall_64+0xae/0x790
[  160.151853][ T8842]  do_syscall_64+0x123/0x790
[  160.151881][ T8842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.151899][ T8842] RIP: 0033:0x7f6f9819f559
[  160.151915][ T8842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  160.151933][ T8842] RSP: 002b:00007f6f99111028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  160.151952][ T8842] RAX: ffffffffffffffda RBX: 00007f6f98425fa0 RCX: 00007f6f9819f559
[  160.151964][ T8842] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005
[  160.151975][ T8842] RBP: 00007f6f99111090 R08: 0000000000000000 R09: 0000000000000000
[  160.151986][ T8842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  160.151997][ T8842] R13: 00007f6f98426038 R14: 00007f6f98425fa0 R15: 00007ffe136268f8
[  160.152022][ T8842]  </TASK>
[  160.152376][ T8842] syz.1.826: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  160.152545][ T8842] CPU: 3 UID: 0 PID: 8842 Comm: syz.1.826 Not tainted syzkaller #0 PREEMPT(full) 
[  160.152565][ T8842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  160.152576][ T8842] Call Trace:
[  160.152582][ T8842]  <TASK>
[  160.152589][ T8842]  dump_stack_lvl+0x100/0x190
[  160.152618][ T8842]  warn_alloc.cold+0x9e/0xb2
[  160.152639][ T8842]  ? __pfx_warn_alloc+0x10/0x10
[  160.152658][ T8842]  ? lockdep_hardirqs_on+0x7d/0x110
[  160.152687][ T8842]  ? __get_vm_area_node+0x2f0/0x350
[  160.152717][ T8842]  ? __get_vm_area_node+0x22b/0x350
[  160.152746][ T8842]  __vmalloc_node_range_noprof+0xdc6/0x1440
[  160.152771][ T8842]  ? __lock_acquire+0x5c0/0x1f40
[  160.152799][ T8842]  ? process_measurement+0x2ec/0x2350
[  160.152817][ T8842]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  160.152837][ T8842]  ? lock_acquire+0x1d1/0x380
[  160.152858][ T8842]  ? find_held_lock+0x2b/0x80
[  160.152876][ T8842]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  160.152900][ T8842]  ? avc_has_perm_noaudit+0x11e/0x470
[  160.152928][ T8842]  ? avc_has_perm_noaudit+0x145/0x470
[  160.152952][ T8842]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  160.152969][ T8842]  __vmalloc_node_noprof+0xad/0xf0
[  160.152995][ T8842]  ? bpf_prog_alloc_no_stats+0x59/0x690
[  160.153015][ T8842]  __vmalloc_noprof+0xa3/0x120
[  160.153040][ T8842]  ? __pfx___vmalloc_noprof+0x10/0x10
[  160.153068][ T8842]  ? rcu_is_watching+0x13/0xc0
[  160.153086][ T8842]  ? cap_capable+0x107/0x430
[  160.153112][ T8842]  bpf_prog_alloc_no_stats+0x59/0x690
[  160.153129][ T8842]  ? security_capable+0x80/0x260
[  160.153155][ T8842]  bpf_prog_alloc+0x3b/0x200
[  160.153188][ T8842]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  160.153215][ T8842]  bpf_prog_load+0x513/0x2ba0
[  160.153238][ T8842]  ? avc_has_perm_noaudit+0x11e/0x470
[  160.153267][ T8842]  ? __pfx_bpf_prog_load+0x10/0x10
[  160.153317][ T8842]  __sys_bpf+0x146f/0x4b60
[  160.153348][ T8842]  ? __pfx___sys_bpf+0x10/0x10
[  160.153378][ T8842]  ? find_held_lock+0x2b/0x80
[  160.153394][ T8842]  ? get_pid_task+0xfc/0x250
[  160.153419][ T8842]  ? get_pid_task+0xfc/0x250
[  160.153453][ T8842]  ? find_held_lock+0x2b/0x80
[  160.153477][ T8842]  ? rcu_read_lock_any_held+0x6a/0x90
[  160.153496][ T8842]  ? find_held_lock+0x2b/0x80
[  160.153513][ T8842]  ? ksys_write+0x190/0x250
[  160.153534][ T8842]  ? ksys_write+0x190/0x250
[  160.153556][ T8842]  ? lock_acquire+0x1d1/0x380
[  160.153596][ T8842]  ? fput+0x7c/0x100
[  160.153622][ T8842]  ? ksys_write+0x1ac/0x250
[  160.153647][ T8842]  ? __x64_sys_bpf+0xce/0x140
[  160.153671][ T8842]  __x64_sys_bpf+0xce/0x140
[  160.153697][ T8842]  ? do_syscall_64+0xae/0x790
[  160.153725][ T8842]  do_syscall_64+0x123/0x790
[  160.153752][ T8842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.153771][ T8842] RIP: 0033:0x7f6f9819f559
[  160.153786][ T8842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  160.153803][ T8842] RSP: 002b:00007f6f99111028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  160.153819][ T8842] RAX: ffffffffffffffda RBX: 00007f6f98425fa0 RCX: 00007f6f9819f559
[  160.153831][ T8842] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005
[  160.153841][ T8842] RBP: 00007f6f99111090 R08: 0000000000000000 R09: 0000000000000000
[  160.153852][ T8842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  160.153862][ T8842] R13: 00007f6f98426038 R14: 00007f6f98425fa0 R15: 00007ffe136268f8
[  160.153887][ T8842]  </TASK>
[  160.153935][ T8842] Mem-Info:
[  160.153944][ T8842] active_anon:60953 inactive_anon:4 isolated_anon:0
[  160.153944][ T8842]  active_file:1216 inactive_file:33433 isolated_file:0
[  160.153944][ T8842]  unevictable:1217 dirty:84 writeback:0
[  160.153944][ T8842]  slab_reclaimable:10383 slab_unreclaimable:69792
[  160.153944][ T8842]  mapped:51002 shmem:52620 pagetables:1536
[  160.153944][ T8842]  sec_pagetables:300 bounce:0
[  160.153944][ T8842]  kernel_misc_reclaimable:0
[  160.153944][ T8842]  free:418385 free_pcp:12889 free_cma:0
[  160.153986][ T8842] Node 0 active_anon:243752kB inactive_anon:16kB active_file:4864kB inactive_file:133424kB unevictable:4868kB isolated(anon):0kB isolated(file):0kB mapped:204008kB dirty:336kB writeback:0kB shmem:210472kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14144kB pagetables:5948kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  160.154032][ T8842] Node 1 active_anon:60kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:196kB sec_pagetables:8kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  160.154076][ T8842] Node 0 DMA free:14752kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:52kB local_pcp:0kB free_cma:0kB
[  160.154124][ T8842] lowmem_reserve[]: 0 1202 1202 1202 1202
[  160.154155][ T8842] Node 0 DMA32 free:40708kB boost:0kB min:27068kB low:33832kB high:40596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:243876kB inactive_anon:16kB active_file:4864kB inactive_file:133424kB unevictable:4868kB writepending:336kB zspages:576kB present:2080628kB managed:1231180kB mlocked:0kB bounce:0kB free_pcp:25380kB local_pcp:3788kB free_cma:0kB
[  160.154204][ T8842] lowmem_reserve[]: 0 0 0 0 0
[  160.154233][ T8842] Node 1 Normal free:1618080kB boost:0kB min:40164kB low:50204kB high:60244kB reserved_highatomic:0kB free_highatomic:0kB active_anon:60kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:26092kB local_pcp:7960kB free_cma:0kB
[  160.154282][ T8842] lowmem_reserve[]: 0 0 0 0 0
[  160.154409][ T8842] Node 0 DMA: 22*4kB (UM) 5*8kB (UME) 22*16kB (UME) 8*32kB (U) 9*64kB (UM) 5*128kB (UME) 2*256kB (ME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (M) 1*4096kB (M) = 14752kB
[  160.154545][ T8842] Node 0 DMA32: 1568*4kB (UE) 472*8kB (UE) 497*16kB (UE) 263*32kB (UE) 117*64kB (UE) 27*128kB (UME) 4*256kB (UE) 4*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 40432kB
[  160.154692][ T8842] Node 1 Normal: 3557*4kB (UM) 2466*8kB (UME) 81*16kB (UME) 45*32kB (UME) 20*64kB (UME) 24*128kB (UM) 19*256kB (UM) 15*512kB (UME) 12*1024kB (UM) 4*2048kB (M) 377*4096kB (UM) = 1618260kB
[  160.154830][ T8842] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  160.154844][ T8842] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  160.154857][ T8842] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  160.154870][ T8842] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  160.154884][ T8842] 87296 total pagecache pages
[  160.154890][ T8842] 0 pages in swap cache
[  160.154896][ T8842] Free swap  = 124820kB
[  160.154902][ T8842] Total swap = 124996kB
[  160.154909][ T8842] 1048443 pages RAM
[  160.154914][ T8842] 0 pages HighMem/MovableOnly
[  160.154920][ T8842] 291338 pages reserved
[  160.154926][ T8842] 0 pages cma reserved
[  160.219618][   T42] kauditd_printk_skb: 10 callbacks suppressed
[  160.219636][   T42] audit: type=1400 audit(1793096646.385:614): avc:  denied  { read } for  pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  160.275025][ T8846] i2c i2c-0: new_device: Missing parameters
[  160.462968][ T8848] netlink: 3556 bytes leftover after parsing attributes in process `syz.1.829'.
[  160.512420][ T8850] FAULT_INJECTION: forcing a failure.
[  160.512420][ T8850] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  160.512450][ T8850] CPU: 3 UID: 0 PID: 8850 Comm: syz.1.830 Not tainted syzkaller #0 PREEMPT(full) 
[  160.512469][ T8850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  160.512480][ T8850] Call Trace:
[  160.512486][ T8850]  <TASK>
[  160.512493][ T8850]  dump_stack_lvl+0x100/0x190
[  160.512524][ T8850]  should_fail_ex.cold+0x5/0xa
[  160.512549][ T8850]  _copy_from_user+0x2e/0xd0
[  160.512586][ T8850]  copy_msghdr_from_user+0x9f/0x4c0
[  160.512627][ T8850]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  160.512655][ T8850]  ? lock_acquire+0x1d1/0x380
[  160.512677][ T8850]  ? get_pid_task+0x2a/0x250
[  160.512704][ T8850]  ___sys_sendmsg+0x106/0x1e0
[  160.512728][ T8850]  ? __pfx____sys_sendmsg+0x10/0x10
[  160.512750][ T8850]  ? get_pid_task+0x106/0x250
[  160.512790][ T8850]  ? find_held_lock+0x2b/0x80
[  160.512822][ T8850]  __sys_sendmsg+0x160/0x210
[  160.512841][ T8850]  ? __pfx___sys_sendmsg+0x10/0x10
[  160.512872][ T8850]  do_syscall_64+0x123/0x790
[  160.512902][ T8850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.512921][ T8850] RIP: 0033:0x7f6f9819f559
[  160.512936][ T8850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  160.512952][ T8850] RSP: 002b:00007f6f99111028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  160.512970][ T8850] RAX: ffffffffffffffda RBX: 00007f6f98425fa0 RCX: 00007f6f9819f559
[  160.512982][ T8850] RDX: 0000000000000000 RSI: 00002000000010c0 RDI: 0000000000000003
[  160.512993][ T8850] RBP: 00007f6f99111090 R08: 0000000000000000 R09: 0000000000000000
[  160.513004][ T8850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  160.513014][ T8850] R13: 00007f6f98426038 R14: 00007f6f98425fa0 R15: 00007ffe136268f8
[  160.513039][ T8850]  </TASK>
[  160.536066][ T8852] FAULT_INJECTION: forcing a failure.
[  160.536066][ T8852] name failslab, interval 1, probability 0, space 0, times 0
[  160.536088][ T8852] CPU: 0 UID: 0 PID: 8852 Comm: syz.5.831 Not tainted syzkaller #0 PREEMPT(full) 
[  160.536101][ T8852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  160.536108][ T8852] Call Trace:
[  160.536112][ T8852]  <TASK>
[  160.536117][ T8852]  dump_stack_lvl+0x100/0x190
[  160.536136][ T8852]  should_fail_ex.cold+0x5/0xa
[  160.536154][ T8852]  should_failslab+0xc2/0x120
[  160.536170][ T8852]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  160.536184][ T8852]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  160.536201][ T8852]  ? alloc_pwq+0x58c/0x1450
[  160.536215][ T8852]  alloc_pwq+0x58c/0x1450
[  160.536232][ T8852]  apply_wqattrs_prepare+0x6cf/0x980
[  160.536248][ T8852]  __alloc_workqueue+0xdae/0x1900
[  160.536267][ T8852]  ? __mutex_unlock_slowpath+0x35d/0x930
[  160.536286][ T8852]  alloc_workqueue_noprof+0xc7/0x130
[  160.536302][ T8852]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  160.536320][ T8852]  ? __ceph_monc_want_map+0x189/0x360
[  160.536337][ T8852]  ? ceph_get_tree+0x399/0x1fd0
[  160.536375][ T8852]  ceph_get_tree+0x3fa/0x1fd0
[  160.536395][ T8852]  ? security_capable+0x80/0x260
[  160.536417][ T8852]  vfs_get_tree+0x92/0x320
[  160.536438][ T8852]  path_mount+0x7d0/0x2850
[  160.536475][ T8852]  ? __pfx_path_mount+0x10/0x10
[  160.536492][ T8852]  ? lockdep_hardirqs_on+0x7d/0x110
[  160.536519][ T8852]  ? putname+0xb1/0x110
[  160.536552][ T8852]  ? kmem_cache_free+0x127/0x6c0
[  160.536570][ T8852]  ? __x64_sys_mount+0x293/0x310
[  160.536583][ T8852]  __x64_sys_mount+0x293/0x310
[  160.536596][ T8852]  ? __pfx___x64_sys_mount+0x10/0x10
[  160.536616][ T8852]  do_syscall_64+0x123/0x790
[  160.536635][ T8852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.536646][ T8852] RIP: 0033:0x7f3bcc59f559
[  160.536656][ T8852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  160.536667][ T8852] RSP: 002b:00007f3bcd40e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  160.536679][ T8852] RAX: ffffffffffffffda RBX: 00007f3bcc825fa0 RCX: 00007f3bcc59f559
[  160.536687][ T8852] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 00002000000005c0
[  160.536694][ T8852] RBP: 00007f3bcc636b20 R08: 0000000000000000 R09: 0000000000000000
[  160.536701][ T8852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  160.536708][ T8852] R13: 00007f3bcc826038 R14: 00007f3bcc825fa0 R15: 00007ffe22e89938
[  160.536723][ T8852]  </TASK>
[  160.567697][ T8856] usb usb5: usbfs: interface 0 claimed by hub while 'syz.1.832' sets config #1
[  160.567817][   T42] audit: type=1400 audit(1793096646.725:615): avc:  denied  { write } for  pid=8855 comm="syz.1.832" name="001" dev="devtmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  160.629727][ T8855] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: 0, delta: -1
[  160.629746][ T8855] ref_ctr decrement failed for inode: 0x455 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88801d4d6200
[  160.630786][ T8855] uprobe: syz.1.832:8855 failed to unregister, leaking uprobe
[  160.863727][ T8875] syzkaller0: entered promiscuous mode
[  160.863747][ T8875] syzkaller0: entered allmulticast mode
[  160.940946][ T8877] i2c i2c-0: new_device: Missing parameters
[  161.267679][ T8886] FAULT_INJECTION: forcing a failure.
[  161.267679][ T8886] name failslab, interval 1, probability 0, space 0, times 0
[  161.267710][ T8886] CPU: 3 UID: 0 PID: 8886 Comm: syz.0.842 Not tainted syzkaller #0 PREEMPT(full) 
[  161.267733][ T8886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  161.267744][ T8886] Call Trace:
[  161.267752][ T8886]  <TASK>
[  161.267760][ T8886]  dump_stack_lvl+0x100/0x190
[  161.267813][ T8886]  should_fail_ex.cold+0x5/0xa
[  161.267841][ T8886]  should_failslab+0xc2/0x120
[  161.267869][ T8886]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  161.267894][ T8886]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  161.267920][ T8886]  ? alloc_pwq+0x58c/0x1450
[  161.267946][ T8886]  alloc_pwq+0x58c/0x1450
[  161.267976][ T8886]  apply_wqattrs_prepare+0x6cf/0x980
[  161.268003][ T8886]  __alloc_workqueue+0xdae/0x1900
[  161.268035][ T8886]  ? __mutex_unlock_slowpath+0x35d/0x930
[  161.268068][ T8886]  alloc_workqueue_noprof+0xc7/0x130
[  161.268094][ T8886]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  161.268127][ T8886]  ? __ceph_monc_want_map+0x189/0x360
[  161.268158][ T8886]  ? ceph_get_tree+0x399/0x1fd0
[  161.268183][ T8886]  ceph_get_tree+0x3fa/0x1fd0
[  161.268204][ T8886]  ? security_capable+0x80/0x260
[  161.268230][ T8886]  vfs_get_tree+0x92/0x320
[  161.268251][ T8886]  path_mount+0x7d0/0x2850
[  161.268278][ T8886]  ? __pfx_path_mount+0x10/0x10
[  161.268298][ T8886]  ? lockdep_hardirqs_on+0x7d/0x110
[  161.268336][ T8886]  ? putname+0xb1/0x110
[  161.268352][ T8886]  ? kmem_cache_free+0x127/0x6c0
[  161.268383][ T8886]  ? __x64_sys_mount+0x293/0x310
[  161.268404][ T8886]  __x64_sys_mount+0x293/0x310
[  161.268427][ T8886]  ? __pfx___x64_sys_mount+0x10/0x10
[  161.268447][ T8886]  ? anon_inode_getfd+0x3c/0xc0
[  161.268495][ T8886]  do_syscall_64+0x123/0x790
[  161.268524][ T8886]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.268542][ T8886] RIP: 0033:0x7fb44c99f559
[  161.268560][ T8886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  161.268579][ T8886] RSP: 002b:00007fb44d877028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  161.268600][ T8886] RAX: ffffffffffffffda RBX: 00007fb44cc25fa0 RCX: 00007fb44c99f559
[  161.268613][ T8886] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 00002000000005c0
[  161.268627][ T8886] RBP: 00007fb44ca36b20 R08: 0000000000000000 R09: 0000000000000000
[  161.268638][ T8886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  161.268649][ T8886] R13: 00007fb44cc26038 R14: 00007fb44cc25fa0 R15: 00007ffe666e2648
[  161.268676][ T8886]  </TASK>
[  161.460383][   T42] audit: type=1400 audit(1793096647.625:616): avc:  denied  { read } for  pid=8882 comm="syz.1.841" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  161.460432][   T42] audit: type=1400 audit(1793096647.625:617): avc:  denied  { open } for  pid=8882 comm="syz.1.841" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  161.461001][   T42] audit: type=1400 audit(1793096647.625:618): avc:  denied  { ioctl } for  pid=8882 comm="syz.1.841" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0xc018937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  161.578918][ T8896] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it!
[  161.690781][ T8904] i2c i2c-0: new_device: Can't parse I2C address
[  161.856826][ T8913] FAULT_INJECTION: forcing a failure.
[  161.856826][ T8913] name failslab, interval 1, probability 0, space 0, times 0
[  161.856848][ T8913] CPU: 3 UID: 0 PID: 8913 Comm: syz.0.853 Not tainted syzkaller #0 PREEMPT(full) 
[  161.856863][ T8913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  161.856870][ T8913] Call Trace:
[  161.856874][ T8913]  <TASK>
[  161.856879][ T8913]  dump_stack_lvl+0x100/0x190
[  161.856899][ T8913]  should_fail_ex.cold+0x5/0xa
[  161.856916][ T8913]  should_failslab+0xc2/0x120
[  161.856934][ T8913]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  161.856949][ T8913]  ? alloc_pwq+0x58c/0x1450
[  161.856965][ T8913]  alloc_pwq+0x58c/0x1450
[  161.856978][ T8913]  ? wqattrs_pod_type+0x107/0x200
[  161.856992][ T8913]  apply_wqattrs_prepare+0x6cf/0x980
[  161.857007][ T8913]  __alloc_workqueue+0xdae/0x1900
[  161.857028][ T8913]  alloc_workqueue_noprof+0xc7/0x130
[  161.857043][ T8913]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  161.857062][ T8913]  ? __ceph_monc_want_map+0x189/0x360
[  161.857083][ T8913]  ceph_get_tree+0x43d/0x1fd0
[  161.857097][ T8913]  ? security_capable+0x80/0x260
[  161.857113][ T8913]  vfs_get_tree+0x92/0x320
[  161.857125][ T8913]  path_mount+0x7d0/0x2850
[  161.857139][ T8913]  ? __pfx_path_mount+0x10/0x10
[  161.857151][ T8913]  ? lockdep_hardirqs_on+0x7d/0x110
[  161.857171][ T8913]  ? putname+0xb1/0x110
[  161.857180][ T8913]  ? kmem_cache_free+0x127/0x6c0
[  161.857195][ T8913]  ? __x64_sys_mount+0x293/0x310
[  161.857206][ T8913]  __x64_sys_mount+0x293/0x310
[  161.857218][ T8913]  ? __pfx___x64_sys_mount+0x10/0x10
[  161.857234][ T8913]  do_syscall_64+0x123/0x790
[  161.857252][ T8913]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.857264][ T8913] RIP: 0033:0x7fb44c99f559
[  161.857274][ T8913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  161.857285][ T8913] RSP: 002b:00007fb44d877028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  161.857302][ T8913] RAX: ffffffffffffffda RBX: 00007fb44cc25fa0 RCX: 00007fb44c99f559
[  161.857312][ T8913] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 00002000000005c0
[  161.857322][ T8913] RBP: 00007fb44ca36b20 R08: 0000000000000000 R09: 0000000000000000
[  161.857333][ T8913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  161.857343][ T8913] R13: 00007fb44cc26038 R14: 00007fb44cc25fa0 R15: 00007ffe666e2648
[  161.857367][ T8913]  </TASK>
[  162.036587][   T42] audit: type=1400 audit(1793096648.195:619): avc:  denied  { mount } for  pid=8923 comm="syz.0.856" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  162.040395][   T42] audit: type=1400 audit(1793096648.205:620): avc:  denied  { write } for  pid=8923 comm="syz.0.856" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  162.056558][ T8924] rxe_eth0 speed is unknown, defaulting to 1000
[  162.188691][   T42] audit: type=1400 audit(1793096648.355:621): avc:  denied  { unmount } for  pid=5791 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  162.208065][ T1487] usb 7-1: new full-speed USB device number 15 using dummy_hcd
[  162.358864][ T1487] usb 7-1: not running at top speed; connect to a high speed hub
[  162.358893][ T1487] usb 7-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00
[  162.359864][ T1487] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64
[  162.359881][ T1487] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64
[  162.359894][ T1487] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  162.359906][ T1487] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  162.359918][ T1487] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64
[  162.359931][ T1487] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  162.361597][ T1487] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.361608][ T1487] usb 7-1: Product: syz
[  162.361615][ T1487] usb 7-1: Manufacturer: syz
[  162.361623][ T1487] usb 7-1: SerialNumber: syz
[  162.366256][ T8922] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  162.366357][ T8922] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  162.366402][ T8922] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  162.366486][ T8922] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  162.366533][ T8922] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  162.370555][ T1487] usb 7-1: USB2VGA dongle found at address 15
[  162.384260][ T1487] usb 7-1: Allocated 8 output buffers
[  162.384274][ T1487] usb 7-1: Not attached to USB 2.0 hub, deferring init
[  162.502824][ T8944] i2c i2c-0: new_device: Can't parse I2C address
[  162.572641][ T8922] usb 7-1: Device not attached to USB 2.0 hub
[  162.579627][ T8922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  162.579994][ T8922] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.580636][ T8922] usb 7-1: Device not attached to USB 2.0 hub
[  162.581648][ T8922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.591563][ T1487] usb 7-1: USB disconnect, device number 15
[  162.610171][ T8948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.649013][ T8950] FAULT_INJECTION: forcing a failure.
[  162.649013][ T8950] name failslab, interval 1, probability 0, space 0, times 0
[  162.649044][ T8950] CPU: 1 UID: 0 PID: 8950 Comm: syz.1.864 Not tainted syzkaller #0 PREEMPT(full) 
[  162.649066][ T8950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  162.649078][ T8950] Call Trace:
[  162.649085][ T8950]  <TASK>
[  162.649092][ T8950]  dump_stack_lvl+0x100/0x190
[  162.649124][ T8950]  should_fail_ex.cold+0x5/0xa
[  162.649153][ T8950]  should_failslab+0xc2/0x120
[  162.649182][ T8950]  __kmalloc_noprof+0xfc/0x840
[  162.649207][ T8950]  ? __alloc_workqueue+0x5d8/0x1900
[  162.649244][ T8950]  __alloc_workqueue+0x5d8/0x1900
[  162.649280][ T8950]  alloc_workqueue_noprof+0xc7/0x130
[  162.649305][ T8950]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  162.649336][ T8950]  ? __ceph_monc_want_map+0x189/0x360
[  162.649372][ T8950]  ceph_get_tree+0x43d/0x1fd0
[  162.649396][ T8950]  ? security_capable+0x80/0x260
[  162.649424][ T8950]  vfs_get_tree+0x92/0x320
[  162.649446][ T8950]  path_mount+0x7d0/0x2850
[  162.649471][ T8950]  ? __pfx_path_mount+0x10/0x10
[  162.649491][ T8950]  ? lockdep_hardirqs_on+0x7d/0x110
[  162.649521][ T8950]  ? putname+0xb1/0x110
[  162.649554][ T8950]  ? kmem_cache_free+0x127/0x6c0
[  162.649585][ T8950]  ? __x64_sys_mount+0x293/0x310
[  162.649606][ T8950]  __x64_sys_mount+0x293/0x310
[  162.649628][ T8950]  ? __pfx___x64_sys_mount+0x10/0x10
[  162.649658][ T8950]  do_syscall_64+0x123/0x790
[  162.649690][ T8950]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.649711][ T8950] RIP: 0033:0x7f6f9819f559
[  162.649726][ T8950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  162.649743][ T8950] RSP: 002b:00007f6f99111028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  162.649764][ T8950] RAX: ffffffffffffffda RBX: 00007f6f98425fa0 RCX: 00007f6f9819f559
[  162.649777][ T8950] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 00002000000005c0
[  162.649788][ T8950] RBP: 00007f6f98236b20 R08: 0000000000000000 R09: 0000000000000000
[  162.649798][ T8950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  162.649809][ T8950] R13: 00007f6f98426038 R14: 00007f6f98425fa0 R15: 00007ffe136268f8
[  162.649835][ T8950]  </TASK>
[  163.136799][ T8979] FAULT_INJECTION: forcing a failure.
[  163.136799][ T8979] name failslab, interval 1, probability 0, space 0, times 0
[  163.136819][ T8979] CPU: 0 UID: 0 PID: 8979 Comm: syz.2.866 Not tainted syzkaller #0 PREEMPT(full) 
[  163.136832][ T8979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  163.136838][ T8979] Call Trace:
[  163.136843][ T8979]  <TASK>
[  163.136847][ T8979]  dump_stack_lvl+0x100/0x190
[  163.136868][ T8979]  should_fail_ex.cold+0x5/0xa
[  163.136885][ T8979]  should_failslab+0xc2/0x120
[  163.136902][ T8979]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  163.136916][ T8979]  ? __alloc_skb+0x140/0x710
[  163.136936][ T8979]  __alloc_skb+0x140/0x710
[  163.136952][ T8979]  ? __alloc_skb+0x5b7/0x710
[  163.136968][ T8979]  ? __pfx___alloc_skb+0x10/0x10
[  163.136988][ T8979]  hci_sock_sendmsg+0x1b69/0x26f0
[  163.137003][ T8979]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  163.137015][ T8979]  ? selinux_socket_sendmsg+0x198/0x2f0
[  163.137033][ T8979]  sock_write_iter+0x560/0x5d0
[  163.137046][ T8979]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  163.137057][ T8979]  ? __pfx_sock_write_iter+0x10/0x10
[  163.137074][ T8979]  ? bpf_lsm_file_permission+0x9/0x10
[  163.137101][ T8979]  ? security_file_permission+0x76/0x210
[  163.137113][ T8979]  ? rw_verify_area+0xce/0x6d0
[  163.137126][ T8979]  vfs_write+0x6af/0x1050
[  163.137140][ T8979]  ? __pfx_sock_write_iter+0x10/0x10
[  163.137155][ T8979]  ? __pfx_vfs_write+0x10/0x10
[  163.137167][ T8979]  ? find_held_lock+0x2b/0x80
[  163.137187][ T8979]  ksys_write+0x1f8/0x250
[  163.137200][ T8979]  ? __pfx_ksys_write+0x10/0x10
[  163.137217][ T8979]  do_syscall_64+0x123/0x790
[  163.137235][ T8979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.137247][ T8979] RIP: 0033:0x7fa78539f559
[  163.137260][ T8979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.137271][ T8979] RSP: 002b:00007fa78622b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  163.137282][ T8979] RAX: ffffffffffffffda RBX: 00007fa785625fa0 RCX: 00007fa78539f559
[  163.137289][ T8979] RDX: 0000000000000019 RSI: 00002000000000c0 RDI: 0000000000000004
[  163.137295][ T8979] RBP: 00007fa78622b090 R08: 0000000000000000 R09: 0000000000000000
[  163.137301][ T8979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  163.137308][ T8979] R13: 00007fa785626038 R14: 00007fa785625fa0 R15: 00007ffd8df9aa88
[  163.137322][ T8979]  </TASK>
[  163.580577][ T9014] device-mapper: ioctl: The device has no table.
[  163.586209][ T9014] device-mapper: ioctl: The device has no table.
[  163.590425][ T9016] i2c i2c-0: new_device: Can't parse I2C address
[  163.653075][ T9020] FAULT_INJECTION: forcing a failure.
[  163.653075][ T9020] name failslab, interval 1, probability 0, space 0, times 0
[  163.653115][ T9020] CPU: 2 UID: 0 PID: 9020 Comm: syz.1.873 Not tainted syzkaller #0 PREEMPT(full) 
[  163.653129][ T9020] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  163.653136][ T9020] Call Trace:
[  163.653140][ T9020]  <TASK>
[  163.653145][ T9020]  dump_stack_lvl+0x100/0x190
[  163.653177][ T9020]  should_fail_ex.cold+0x5/0xa
[  163.653194][ T9020]  should_failslab+0xc2/0x120
[  163.653220][ T9020]  __kmalloc_noprof+0xfc/0x840
[  163.653240][ T9020]  ? __alloc_workqueue+0x5d8/0x1900
[  163.653258][ T9020]  __alloc_workqueue+0x5d8/0x1900
[  163.653282][ T9020]  alloc_workqueue_noprof+0xc7/0x130
[  163.653297][ T9020]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  163.653315][ T9020]  ? __ceph_monc_want_map+0x189/0x360
[  163.653340][ T9020]  ceph_get_tree+0x43d/0x1fd0
[  163.653361][ T9020]  ? security_capable+0x80/0x260
[  163.653383][ T9020]  vfs_get_tree+0x92/0x320
[  163.653402][ T9020]  path_mount+0x7d0/0x2850
[  163.653424][ T9020]  ? __pfx_path_mount+0x10/0x10
[  163.653435][ T9020]  ? lockdep_hardirqs_on+0x7d/0x110
[  163.653453][ T9020]  ? putname+0xb1/0x110
[  163.653463][ T9020]  ? kmem_cache_free+0x127/0x6c0
[  163.653478][ T9020]  ? __x64_sys_mount+0x293/0x310
[  163.653490][ T9020]  __x64_sys_mount+0x293/0x310
[  163.653504][ T9020]  ? __pfx___x64_sys_mount+0x10/0x10
[  163.653520][ T9020]  do_syscall_64+0x123/0x790
[  163.653539][ T9020]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.653550][ T9020] RIP: 0033:0x7f6f9819f559
[  163.653560][ T9020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.653571][ T9020] RSP: 002b:00007f6f99111028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  163.653582][ T9020] RAX: ffffffffffffffda RBX: 00007f6f98425fa0 RCX: 00007f6f9819f559
[  163.653589][ T9020] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 00002000000005c0
[  163.653595][ T9020] RBP: 00007f6f98236b20 R08: 0000000000000000 R09: 0000000000000000
[  163.653601][ T9020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.653607][ T9020] R13: 00007f6f98426038 R14: 00007f6f98425fa0 R15: 00007ffe136268f8
[  163.653621][ T9020]  </TASK>
[  163.720727][ T9024] FAULT_INJECTION: forcing a failure.
[  163.720727][ T9024] name failslab, interval 1, probability 0, space 0, times 0
[  163.720752][ T9024] CPU: 1 UID: 0 PID: 9024 Comm: syz.1.874 Not tainted syzkaller #0 PREEMPT(full) 
[  163.720770][ T9024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  163.720779][ T9024] Call Trace:
[  163.720785][ T9024]  <TASK>
[  163.720791][ T9024]  dump_stack_lvl+0x100/0x190
[  163.720820][ T9024]  should_fail_ex.cold+0x5/0xa
[  163.720843][ T9024]  should_failslab+0xc2/0x120
[  163.720866][ T9024]  kmem_cache_alloc_noprof+0x92/0x6a0
[  163.720886][ T9024]  ? security_file_alloc+0x34/0x2c0
[  163.720907][ T9024]  security_file_alloc+0x34/0x2c0
[  163.720923][ T9024]  init_file+0x95/0x480
[  163.720949][ T9024]  alloc_empty_file+0x79/0x1c0
[  163.720965][ T9024]  path_openat+0xd6/0x23f0
[  163.720992][ T9024]  ? __pfx_path_openat+0x10/0x10
[  163.721020][ T9024]  do_file_open+0x20e/0x430
[  163.721045][ T9024]  ? __pfx_do_file_open+0x10/0x10
[  163.721084][ T9024]  ? _raw_spin_unlock+0x28/0x50
[  163.721104][ T9024]  ? alloc_fd+0x471/0x7a0
[  163.721142][ T9024]  do_sys_openat2+0x163/0x1d0
[  163.721158][ T9024]  ? __pfx_do_sys_openat2+0x10/0x10
[  163.721174][ T9024]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  163.721199][ T9024]  ? __fget_files+0x21f/0x3d0
[  163.721225][ T9024]  __x64_sys_openat+0x12d/0x210
[  163.721262][ T9024]  ? __pfx___x64_sys_openat+0x10/0x10
[  163.721277][ T9024]  ? ksys_write+0x1ac/0x250
[  163.721304][ T9024]  do_syscall_64+0x123/0x790
[  163.721329][ T9024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.721345][ T9024] RIP: 0033:0x7f6f9815fd8e
[  163.721360][ T9024] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  163.721374][ T9024] RSP: 002b:00007f6f99110f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  163.721390][ T9024] RAX: ffffffffffffffda RBX: 00007f6f991116c0 RCX: 00007f6f9815fd8e
[  163.721401][ T9024] RDX: 0000000000000000 RSI: 00007f6f9823624e RDI: ffffffffffffff9c
[  163.721411][ T9024] RBP: 00007f6f99111090 R08: 0000000000000000 R09: 0000000000000000
[  163.721420][ T9024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  163.721430][ T9024] R13: 00007f6f98426038 R14: 00007f6f98425fa0 R15: 00007ffe136268f8
[  163.721451][ T9024]  </TASK>
[  163.867663][   T42] audit: type=1400 audit(1793096650.025:622): avc:  denied  { mount } for  pid=9031 comm="syz.2.878" name="/" dev="rpc_pipefs" ino=46486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  164.223730][ T9048] i2c i2c-0: new_device: Extra parameters
[  164.448940][ T9054] device-mapper: table: 248:3: raid: 'raid10_format' is an invalid parameter for this RAID type (-EINVAL)
[  164.448964][ T9054] device-mapper: ioctl: error adding target to table
[  164.454270][ T9054] clocksource: Switched to clocksource acpi_pm
[  164.464762][ T9054] clocksource: Switched to clocksource tsc
[  164.565430][   T42] audit: type=1400 audit(1793096650.725:623): avc:  denied  { connect } for  pid=9059 comm="syz.1.887" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  164.751245][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.889'.
[  165.250754][ T9050] ceph: No mds server is up or the cluster is laggy
[  165.430106][ T9083] i2c i2c-0: new_device: Extra parameters
[  165.509922][ T9087] device-mapper: table: 248:0: thin-pool: Error opening metadata block device (-ENOENT)
[  165.509947][ T9087] device-mapper: ioctl: error adding target to table
[  165.559345][ T9089] device-mapper: table: 248:4: crypt: Device lookup failed (-ENOENT)
[  165.559382][ T9089] device-mapper: ioctl: error adding target to table
[  165.659522][   T42] kauditd_printk_skb: 1 callbacks suppressed
[  165.659540][   T42] audit: type=1400 audit(1793096651.825:625): avc:  denied  { write } for  pid=9098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.711041][ T9097] e1000e 0000:00:02.0 eth1: NIC Link is Down
[  165.713777][ T9097] e1000e 0000:00:02.0 eth1: entered promiscuous mode
[  165.714466][ T9097] netlink: 'syz.0.899': attribute type 1 has an invalid length.
[  165.714478][ T9097] netlink: 1 bytes leftover after parsing attributes in process `syz.0.899'.
[  165.737047][   T42] audit: type=1400 audit(1793096651.895:626): avc:  denied  { write } for  pid=9105 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.817062][   T42] audit: type=1400 audit(1793096651.975:627): avc:  denied  { write } for  pid=9111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.876283][   T42] audit: type=1400 audit(1793096652.035:628): avc:  denied  { write } for  pid=9114 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.966367][   T42] audit: type=1400 audit(1793096652.125:629): avc:  denied  { write } for  pid=9116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.975707][ T9118] device-mapper: table: 248:5: crypt: Device lookup failed (-ENOENT)
[  165.975731][ T9118] device-mapper: ioctl: error adding target to table
[  166.032801][ T9063] ceph: No mds server is up or the cluster is laggy
[  166.062302][   T42] audit: type=1400 audit(1793096652.215:630): avc:  denied  { write } for  pid=9122 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.185092][   T42] audit: type=1400 audit(1793096652.345:631): avc:  denied  { write } for  pid=9130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.224911][   T42] audit: type=1400 audit(1793096652.385:632): avc:  denied  { write } for  pid=9134 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.254346][ T9137] i2c i2c-0: new_device: Extra parameters
[  166.296466][   T42] audit: type=1400 audit(1793096652.455:633): avc:  denied  { write } for  pid=9138 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.354775][   T42] audit: type=1400 audit(1793096652.515:634): avc:  denied  { write } for  pid=9141 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.431115][ T9149] FAULT_INJECTION: forcing a failure.
[  166.431115][ T9149] name failslab, interval 1, probability 0, space 0, times 0
[  166.431158][ T9149] CPU: 0 UID: 0 PID: 9149 Comm: syz.5.906 Not tainted syzkaller #0 PREEMPT(full) 
[  166.431177][ T9149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  166.431188][ T9149] Call Trace:
[  166.431200][ T9149]  <TASK>
[  166.431206][ T9149]  dump_stack_lvl+0x100/0x190
[  166.431245][ T9149]  should_fail_ex.cold+0x5/0xa
[  166.431270][ T9149]  should_failslab+0xc2/0x120
[  166.431312][ T9149]  kmem_cache_alloc_noprof+0x92/0x6a0
[  166.431345][ T9149]  ? security_file_alloc+0x34/0x2c0
[  166.431379][ T9149]  security_file_alloc+0x34/0x2c0
[  166.431398][ T9149]  init_file+0x95/0x480
[  166.431437][ T9149]  alloc_empty_file+0x79/0x1c0
[  166.431455][ T9149]  path_openat+0xd6/0x23f0
[  166.431495][ T9149]  ? __pfx_path_openat+0x10/0x10
[  166.431527][ T9149]  do_file_open+0x20e/0x430
[  166.431554][ T9149]  ? __pfx_do_file_open+0x10/0x10
[  166.431594][ T9149]  ? _raw_spin_unlock+0x28/0x50
[  166.431623][ T9149]  ? alloc_fd+0x471/0x7a0
[  166.431655][ T9149]  do_sys_openat2+0x163/0x1d0
[  166.431674][ T9149]  ? __pfx_do_sys_openat2+0x10/0x10
[  166.431691][ T9149]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  166.431718][ T9149]  ? __fget_files+0x21f/0x3d0
[  166.431752][ T9149]  __x64_sys_openat+0x12d/0x210
[  166.431769][ T9149]  ? __pfx___x64_sys_openat+0x10/0x10
[  166.431785][ T9149]  ? ksys_write+0x1ac/0x250
[  166.431814][ T9149]  do_syscall_64+0x123/0x790
[  166.431841][ T9149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.431858][ T9149] RIP: 0033:0x7f3bcc59f559
[  166.431874][ T9149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  166.431888][ T9149] RSP: 002b:00007f3bcd40e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  166.431911][ T9149] RAX: ffffffffffffffda RBX: 00007f3bcc825fa0 RCX: 00007f3bcc59f559
[  166.431922][ T9149] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  166.431934][ T9149] RBP: 00007f3bcd40e090 R08: 0000000000000000 R09: 0000000000000000
[  166.431943][ T9149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  166.431954][ T9149] R13: 00007f3bcc826038 R14: 00007f3bcc825fa0 R15: 00007ffe22e89938
[  166.431977][ T9149]  </TASK>
[  166.594204][ T9108] ceph: No mds server is up or the cluster is laggy
[  166.644537][ T9165] MTD: Attempt to mount non-MTD device "/dev/sr0"
[  166.655615][ T9165] cramfs: wrong magic
[  166.888143][   T41] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  166.974056][ T9169] i2c-slave-eeprom 0-0001: i2c_slave_register: client slave flag not set. You might see address collisions
[  166.974080][ T9169] i2c-slave-eeprom 0-0001: i2c_slave_register: invalid address
[  166.974228][ T9169] i2c-slave-eeprom 0-0001: probe with driver i2c-slave-eeprom failed with error -22
[  166.976390][ T9169] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x01
[  166.979962][ T9171] netlink: 44 bytes leftover after parsing attributes in process `syz.2.913'.
[  166.986137][ T9171] bond1: (slave lo): Releasing backup interface
[  166.994151][ T9171] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  166.994658][ T9171] bridge_slave_0: left allmulticast mode
[  166.994676][ T9171] bridge_slave_0: left promiscuous mode
[  166.995240][ T9171] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.000993][ T9171] bridge_slave_1: left allmulticast mode
[  167.001005][ T9171] bridge_slave_1: left promiscuous mode
[  167.001141][ T9171] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.014915][ T9171] bond0: (slave bond_slave_0): Releasing backup interface
[  167.024033][ T9171] bond0: (slave bond_slave_1): Releasing backup interface
[  167.026326][ T9171] team0: Port device team_slave_0 removed
[  167.027221][ T9171] team0: Port device team_slave_1 removed
[  167.027387][ T9171] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.031461][ T9171] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.044473][   T41] usb 5-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  167.047791][   T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  167.047823][   T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  167.047842][   T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  167.047863][   T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  167.053388][   T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.053408][   T41] usb 5-1: Product: syz
[  167.053421][   T41] usb 5-1: Manufacturer: syz
[  167.053433][   T41] usb 5-1: SerialNumber: syz
[  167.059882][   T41] usb 5-1: config 0 descriptor??
[  167.264948][   T41] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  167.464813][ T9165] usb 5-1: Couldn't submit interrupt_out_urb -90
[  167.467573][ T9189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.467659][ T9165] MTD: Attempt to mount non-MTD device "/dev/sr0"
[  167.468837][ T9192] usb 5-1: Couldn't submit interrupt_out_urb -90
[  167.469177][ T9189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.476834][ T9165] cramfs: wrong magic
[  167.516007][ T1361] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  167.768699][ T1361] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  168.080933][ T9213] =======================================================
[  168.080933][ T9213] WARNING: The mand mount option has been deprecated and
[  168.080933][ T9213]          and is ignored by this kernel. Remove the mand
[  168.080933][ T9213]          option from the mount to silence this warning.
[  168.080933][ T9213] =======================================================
[  168.081024][ T9213] new mount options do not match the existing superblock, will be ignored
[  168.278947][ T1361] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  168.326209][ T9197] ceph: No mds server is up or the cluster is laggy
[  168.389780][ T9221] FAULT_INJECTION: forcing a failure.
[  168.389780][ T9221] name failslab, interval 1, probability 0, space 0, times 0
[  168.389802][ T9221] CPU: 3 UID: 0 PID: 9221 Comm: syz.5.931 Not tainted syzkaller #0 PREEMPT(full) 
[  168.389815][ T9221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  168.389821][ T9221] Call Trace:
[  168.389825][ T9221]  <TASK>
[  168.389830][ T9221]  dump_stack_lvl+0x100/0x190
[  168.389850][ T9221]  should_fail_ex.cold+0x5/0xa
[  168.389867][ T9221]  should_failslab+0xc2/0x120
[  168.389884][ T9221]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  168.389897][ T9221]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  168.389927][ T9221]  ? alloc_pwq+0x58c/0x1450
[  168.389942][ T9221]  alloc_pwq+0x58c/0x1450
[  168.389958][ T9221]  apply_wqattrs_prepare+0x61e/0x980
[  168.389974][ T9221]  __alloc_workqueue+0xdae/0x1900
[  168.390002][ T9221]  alloc_workqueue_noprof+0xc7/0x130
[  168.390023][ T9221]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  168.390047][ T9221]  ? mempool_create_node_noprof+0xf4/0x1b0
[  168.390075][ T9221]  ? mempool_create_node_noprof+0xfe/0x1b0
[  168.390092][ T9221]  ? __pfx_msgpool_alloc+0x10/0x10
[  168.390128][ T9221]  ceph_osdc_init+0x5c2/0xa00
[  168.390144][ T9221]  ceph_create_client+0x281/0x370
[  168.390157][ T9221]  ceph_get_tree+0x1a4/0x1fd0
[  168.390180][ T9221]  ? bpf_lsm_capable+0x9/0x10
[  168.390203][ T9221]  ? security_capable+0x80/0x260
[  168.390220][ T9221]  vfs_get_tree+0x92/0x320
[  168.390232][ T9221]  path_mount+0x7d0/0x2850
[  168.390249][ T9221]  ? __pfx_path_mount+0x10/0x10
[  168.390262][ T9221]  ? lockdep_hardirqs_on+0x7d/0x110
[  168.390280][ T9221]  ? putname+0xb1/0x110
[  168.390289][ T9221]  ? kmem_cache_free+0x127/0x6c0
[  168.390305][ T9221]  ? __x64_sys_mount+0x293/0x310
[  168.390316][ T9221]  __x64_sys_mount+0x293/0x310
[  168.390328][ T9221]  ? __pfx___x64_sys_mount+0x10/0x10
[  168.390345][ T9221]  do_syscall_64+0x123/0x790
[  168.390364][ T9221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.390375][ T9221] RIP: 0033:0x7f3bcc59f559
[  168.390385][ T9221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  168.390395][ T9221] RSP: 002b:00007f3bcd40e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  168.390406][ T9221] RAX: ffffffffffffffda RBX: 00007f3bcc825fa0 RCX: 00007f3bcc59f559
[  168.390413][ T9221] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 00002000000005c0
[  168.390419][ T9221] RBP: 00007f3bcc636b20 R08: 0000000000000000 R09: 0000000000000000
[  168.390426][ T9221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.390432][ T9221] R13: 00007f3bcc826038 R14: 00007f3bcc825fa0 R15: 00007ffe22e89938
[  168.390446][ T9221]  </TASK>
[  168.409905][ T9224] netlink: 44 bytes leftover after parsing attributes in process `syz.1.926'.
[  168.410986][ T9224] bridge_slave_0: left allmulticast mode
[  168.411000][ T9224] bridge_slave_0: left promiscuous mode
[  168.411169][ T9224] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.414700][ T9224] bridge_slave_1: left allmulticast mode
[  168.414756][ T9224] bridge_slave_1: left promiscuous mode
[  168.414889][ T9224] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.442935][ T9224] team0: Port device team_slave_0 removed
[  168.449337][ T9224] team0: Port device team_slave_1 removed
[  168.449577][ T9224] batman_adv: batadv0: Removing interface: batadv_slave_0
[  168.452053][ T9224] batman_adv: batadv0: Removing interface: batadv_slave_1
[  168.455970][ T9224] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  168.563024][ T9227] uprobe: syz.2.933:9227 failed to unregister, leaking uprobe
[  168.754465][ T9243] FAULT_INJECTION: forcing a failure.
[  168.754465][ T9243] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  168.754486][ T9243] CPU: 2 UID: 0 PID: 9243 Comm: syz.5.938 Not tainted syzkaller #0 PREEMPT(full) 
[  168.754498][ T9243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  168.754505][ T9243] Call Trace:
[  168.754509][ T9243]  <TASK>
[  168.754513][ T9243]  dump_stack_lvl+0x100/0x190
[  168.754533][ T9243]  should_fail_ex.cold+0x5/0xa
[  168.754549][ T9243]  _copy_to_user+0x32/0xd0
[  168.754598][ T9243]  simple_read_from_buffer+0xcb/0x170
[  168.754619][ T9243]  proc_fail_nth_read+0x1af/0x230
[  168.754647][ T9243]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  168.754665][ T9243]  ? rw_verify_area+0xce/0x6d0
[  168.754677][ T9243]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  168.754694][ T9243]  vfs_read+0x1e4/0xb40
[  168.754707][ T9243]  ? lock_acquire+0x1d1/0x380
[  168.754729][ T9243]  ? __fget_files+0x34/0x3d0
[  168.754745][ T9243]  ? __pfx_vfs_read+0x10/0x10
[  168.754756][ T9243]  ? find_held_lock+0x2b/0x80
[  168.754767][ T9243]  ? __fget_files+0x215/0x3d0
[  168.754785][ T9243]  ? __fget_files+0x21f/0x3d0
[  168.754804][ T9243]  ksys_read+0x12a/0x250
[  168.754817][ T9243]  ? __pfx_ksys_read+0x10/0x10
[  168.754834][ T9243]  do_syscall_64+0x123/0x790
[  168.754852][ T9243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.754863][ T9243] RIP: 0033:0x7f3bcc55fd8e
[  168.754872][ T9243] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  168.754882][ T9243] RSP: 002b:00007f3bcd40dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  168.754893][ T9243] RAX: ffffffffffffffda RBX: 00007f3bcd40e6c0 RCX: 00007f3bcc55fd8e
[  168.754900][ T9243] RDX: 000000000000000f RSI: 00007f3bcd40e0a0 RDI: 0000000000000006
[  168.754906][ T9243] RBP: 00007f3bcd40e090 R08: 0000000000000000 R09: 0000000000000000
[  168.754912][ T9243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.754918][ T9243] R13: 00007f3bcc826038 R14: 00007f3bcc825fa0 R15: 00007ffe22e89938
[  168.754932][ T9243]  </TASK>
[  169.665450][ T1361] usb 5-1: USB disconnect, device number 9
[  169.726592][ T9249] ceph: No mds server is up or the cluster is laggy
[  169.807434][ T9255] FAULT_INJECTION: forcing a failure.
[  169.807434][ T9255] name failslab, interval 1, probability 0, space 0, times 0
[  169.807456][ T9255] CPU: 1 UID: 0 PID: 9255 Comm: syz.2.941 Not tainted syzkaller #0 PREEMPT(full) 
[  169.807469][ T9255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  169.807475][ T9255] Call Trace:
[  169.807479][ T9255]  <TASK>
[  169.807484][ T9255]  dump_stack_lvl+0x100/0x190
[  169.807505][ T9255]  should_fail_ex.cold+0x5/0xa
[  169.807521][ T9255]  ? __pfx_rescuer_thread+0x10/0x10
[  169.807532][ T9255]  should_failslab+0xc2/0x120
[  169.807547][ T9255]  __kmalloc_cache_noprof+0x91/0x6d0
[  169.807559][ T9255]  ? __kthread_create_on_node+0xce/0x3f0
[  169.807576][ T9255]  ? __pfx_rescuer_thread+0x10/0x10
[  169.807586][ T9255]  __kthread_create_on_node+0xce/0x3f0
[  169.807612][ T9255]  ? vsnprintf+0x4c5/0x1300
[  169.807629][ T9255]  ? __pfx___kthread_create_on_node+0x10/0x10
[  169.807651][ T9255]  ? __pfx_rescuer_thread+0x10/0x10
[  169.807662][ T9255]  kthread_create_on_node+0xc7/0x100
[  169.807677][ T9255]  ? __pfx_kthread_create_on_node+0x10/0x10
[  169.807691][ T9255]  ? __pfx_scnprintf+0x10/0x10
[  169.807708][ T9255]  ? __kmalloc_cache_node_noprof+0x30c/0x710
[  169.807724][ T9255]  ? init_rescuer+0x19f/0x550
[  169.807743][ T9255]  init_rescuer+0x321/0x550
[  169.807760][ T9255]  ? __pfx_init_rescuer+0x10/0x10
[  169.807775][ T9255]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  169.807793][ T9255]  ? __alloc_workqueue+0xdea/0x1900
[  169.807807][ T9255]  ? kfree+0x22b/0x6d0
[  169.807819][ T9255]  __alloc_workqueue+0xf81/0x1900
[  169.807839][ T9255]  alloc_workqueue_noprof+0xc7/0x130
[  169.807854][ T9255]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  169.807870][ T9255]  ? mempool_create_node_noprof+0xf4/0x1b0
[  169.807887][ T9255]  ? mempool_create_node_noprof+0xfe/0x1b0
[  169.807904][ T9255]  ? __pfx_msgpool_alloc+0x10/0x10
[  169.807924][ T9255]  ceph_osdc_init+0x5c2/0xa00
[  169.807939][ T9255]  ceph_create_client+0x281/0x370
[  169.807952][ T9255]  ceph_get_tree+0x1a4/0x1fd0
[  169.807965][ T9255]  ? bpf_lsm_capable+0x9/0x10
[  169.807980][ T9255]  ? security_capable+0x80/0x260
[  169.807996][ T9255]  vfs_get_tree+0x92/0x320
[  169.808008][ T9255]  path_mount+0x7d0/0x2850
[  169.808022][ T9255]  ? __pfx_path_mount+0x10/0x10
[  169.808033][ T9255]  ? lockdep_hardirqs_on+0x7d/0x110
[  169.808051][ T9255]  ? putname+0xb1/0x110
[  169.808060][ T9255]  ? kmem_cache_free+0x127/0x6c0
[  169.808076][ T9255]  ? __x64_sys_mount+0x293/0x310
[  169.808087][ T9255]  __x64_sys_mount+0x293/0x310
[  169.808099][ T9255]  ? __pfx___x64_sys_mount+0x10/0x10
[  169.808116][ T9255]  do_syscall_64+0x123/0x790
[  169.808133][ T9255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.808149][ T9255] RIP: 0033:0x7fa78539f559
[  169.808160][ T9255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  169.808170][ T9255] RSP: 002b:00007fa78622b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  169.808182][ T9255] RAX: ffffffffffffffda RBX: 00007fa785625fa0 RCX: 00007fa78539f559
[  169.808190][ T9255] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 00002000000005c0
[  169.808198][ T9255] RBP: 00007fa785436b20 R08: 0000000000000000 R09: 0000000000000000
[  169.808205][ T9255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  169.808212][ T9255] R13: 00007fa785626038 R14: 00007fa785625fa0 R15: 00007ffd8df9aa88
[  169.808228][ T9255]  </TASK>
[  169.825431][ T9261] netlink: 36 bytes leftover after parsing attributes in process `syz.0.949'.
[  169.869452][ T9255] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -ENOMEM
[  170.081611][   T41] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  170.338911][   T41] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  170.599326][ T9301] EXT4-fs warning (device sda1): verify_group_input:161: Bad blocks count 4294705151
[  170.858405][   T41] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  170.880628][   T42] kauditd_printk_skb: 8 callbacks suppressed
[  170.880639][   T42] audit: type=1400 audit(1793096657.045:643): avc:  denied  { name_bind } for  pid=9306 comm="syz.2.960" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  170.904082][ T9280] ceph: No mds server is up or the cluster is laggy
[  171.050403][ T9321] EXT4-fs warning (device sda1): verify_group_input:161: Bad blocks count 4294705151
[  172.193126][ T9349] ceph: No mds server is up or the cluster is laggy
[  172.548081][   T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  172.720100][   T10] usb 5-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00
[  172.721006][   T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  172.721022][   T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  172.721034][   T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  172.721057][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.725787][ T9386] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  172.725838][ T9386] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  172.727051][   T10] pl2303 5-1:1.0: pl2303 converter detected
[  172.735956][   T10] usb 5-1: pl2303 converter now attached to ttyUSB0
[  173.154347][   T42] audit: type=1400 audit(1793096659.315:644): avc:  denied  { append } for  pid=9385 comm="syz.0.981" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  173.154769][ T9386] program syz.0.981 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  173.189340][ T1135] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
[  173.189356][ T1135] ata1.00: irq_stat 0x40000000
[  173.189366][ T1135] ata1.00: failed command: ZAC MANAGEMENT OUT
[  173.189373][ T1135] ata1.00: cmd 9f/04:00:00:00:00/00:00:00:00:00/40 tag 20 nodata 0 in
[  173.189373][ T1135]          res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error)
[  173.189402][ T1135] ata1.00: status: { DRDY ERR }
[  173.189409][ T1135] ata1.00: error: { ABRT }
[  173.189423][ T1135] ata1.00: device reported invalid CHS sector 0
[  173.189856][ T9386] netlink: 'syz.0.981': attribute type 2 has an invalid length.
[  173.190407][ T5874] usb 5-1: USB disconnect, device number 10
[  173.222361][ T5874] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  173.222717][ T5874] pl2303 5-1:1.0: device disconnected
[  173.790884][ T9413] FAULT_INJECTION: forcing a failure.
[  173.790884][ T9413] name failslab, interval 1, probability 0, space 0, times 0
[  173.790925][ T9413] CPU: 3 UID: 0 PID: 9413 Comm: syz.2.989 Not tainted syzkaller #0 PREEMPT(full) 
[  173.790946][ T9413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  173.790956][ T9413] Call Trace:
[  173.790962][ T9413]  <TASK>
[  173.790969][ T9413]  dump_stack_lvl+0x100/0x190
[  173.791054][ T9413]  should_fail_ex.cold+0x5/0xa
[  173.791079][ T9413]  should_failslab+0xc2/0x120
[  173.791119][ T9413]  __kmalloc_cache_node_noprof+0x94/0x710
[  173.791153][ T9413]  ? __alloc_workqueue+0xa4f/0x1900
[  173.791183][ T9413]  __alloc_workqueue+0xa4f/0x1900
[  173.791212][ T9413]  ? __mutex_unlock_slowpath+0x35d/0x930
[  173.791267][ T9413]  alloc_workqueue_noprof+0xc7/0x130
[  173.791292][ T9413]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  173.791321][ T9413]  ? __ceph_monc_want_map+0x189/0x360
[  173.791349][ T9413]  ? ceph_get_tree+0x399/0x1fd0
[  173.791382][ T9413]  ceph_get_tree+0x3fa/0x1fd0
[  173.791403][ T9413]  ? security_capable+0x80/0x260
[  173.791436][ T9413]  vfs_get_tree+0x92/0x320
[  173.791463][ T9413]  path_mount+0x7d0/0x2850
[  173.791494][ T9413]  ? __pfx_path_mount+0x10/0x10
[  173.791511][ T9413]  ? lockdep_hardirqs_on+0x7d/0x110
[  173.791539][ T9413]  ? putname+0xb1/0x110
[  173.791554][ T9413]  ? kmem_cache_free+0x127/0x6c0
[  173.791580][ T9413]  ? __x64_sys_mount+0x293/0x310
[  173.791596][ T9413]  __x64_sys_mount+0x293/0x310
[  173.791615][ T9413]  ? __pfx___x64_sys_mount+0x10/0x10
[  173.791641][ T9413]  do_syscall_64+0x123/0x790
[  173.791667][ T9413]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.791685][ T9413] RIP: 0033:0x7fa78539f559
[  173.791700][ T9413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  173.791716][ T9413] RSP: 002b:00007fa78622b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  173.791744][ T9413] RAX: ffffffffffffffda RBX: 00007fa785625fa0 RCX: 00007fa78539f559
[  173.791755][ T9413] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 00002000000005c0
[  173.791767][ T9413] RBP: 00007fa785436b20 R08: 0000000000000000 R09: 0000000000000000
[  173.791778][ T9413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  173.791789][ T9413] R13: 00007fa785626038 R14: 00007fa785625fa0 R15: 00007ffd8df9aa88
[  173.791815][ T9413]  </TASK>
[  174.086599][ T9324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  174.138464][   T42] audit: type=1400 audit(1793096660.295:645): avc:  denied  { read write } for  pid=9429 comm="syz.1.993" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  174.139206][   T42] audit: type=1400 audit(1793096660.305:646): avc:  denied  { open } for  pid=9429 comm="syz.1.993" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  174.168150][   T42] audit: type=1400 audit(1793096660.325:647): avc:  denied  { getattr } for  pid=9429 comm="syz.1.993" name="/" dev="9p" ino=71827657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  174.170464][ T9430] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  174.193469][   T42] audit: type=1400 audit(1793096660.355:648): avc:  denied  { link } for  pid=9429 comm="syz.1.993" name="file0" dev="overlay" ino=71827675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  174.196787][   T42] audit: type=1400 audit(1793096660.355:649): avc:  denied  { write open } for  pid=9429 comm="syz.1.993" path=2F202864656C6574656429 dev="tmpfs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  174.198894][   T42] audit: type=1400 audit(1793096660.365:650): avc:  denied  { setattr } for  pid=9429 comm="syz.1.993" name="#1307" dev="tmpfs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  174.200500][   T42] audit: type=1400 audit(1793096660.365:651): avc:  denied  { create } for  pid=9429 comm="syz.1.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  174.201810][   T42] audit: type=1400 audit(1793096660.365:652): avc:  denied  { read } for  pid=9429 comm="syz.1.993" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  174.567275][ T9451] FAULT_INJECTION: forcing a failure.
[  174.567275][ T9451] name failslab, interval 1, probability 0, space 0, times 0
[  174.567295][ T9451] CPU: 2 UID: 0 PID: 9451 Comm: syz.2.999 Not tainted syzkaller #0 PREEMPT(full) 
[  174.567308][ T9451] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  174.567314][ T9451] Call Trace:
[  174.567318][ T9451]  <TASK>
[  174.567322][ T9451]  dump_stack_lvl+0x100/0x190
[  174.567342][ T9451]  should_fail_ex.cold+0x5/0xa
[  174.567359][ T9451]  should_failslab+0xc2/0x120
[  174.567375][ T9451]  __kmalloc_cache_node_noprof+0x94/0x710
[  174.567391][ T9451]  ? __alloc_workqueue+0xa4f/0x1900
[  174.567409][ T9451]  __alloc_workqueue+0xa4f/0x1900
[  174.567427][ T9451]  ? __mutex_unlock_slowpath+0x35d/0x930
[  174.567445][ T9451]  alloc_workqueue_noprof+0xc7/0x130
[  174.567460][ T9451]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  174.567477][ T9451]  ? __ceph_monc_want_map+0x189/0x360
[  174.567495][ T9451]  ? ceph_get_tree+0x399/0x1fd0
[  174.567511][ T9451]  ceph_get_tree+0x3fa/0x1fd0
[  174.567524][ T9451]  ? security_capable+0x80/0x260
[  174.567540][ T9451]  vfs_get_tree+0x92/0x320
[  174.567552][ T9451]  path_mount+0x7d0/0x2850
[  174.567566][ T9451]  ? __pfx_path_mount+0x10/0x10
[  174.567576][ T9451]  ? lockdep_hardirqs_on+0x7d/0x110
[  174.567593][ T9451]  ? putname+0xb1/0x110
[  174.567602][ T9451]  ? kmem_cache_free+0x127/0x6c0
[  174.567617][ T9451]  ? __x64_sys_mount+0x293/0x310
[  174.567628][ T9451]  __x64_sys_mount+0x293/0x310
[  174.567640][ T9451]  ? __pfx___x64_sys_mount+0x10/0x10
[  174.567652][ T9451]  ? anon_inode_getfd+0x3c/0xc0
[  174.567687][ T9451]  do_syscall_64+0x123/0x790
[  174.567705][ T9451]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.567718][ T9451] RIP: 0033:0x7fa78539f559
[  174.567727][ T9451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  174.567739][ T9451] RSP: 002b:00007fa78622b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  174.567750][ T9451] RAX: ffffffffffffffda RBX: 00007fa785625fa0 RCX: 00007fa78539f559
[  174.567757][ T9451] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 00002000000005c0
[  174.567763][ T9451] RBP: 00007fa785436b20 R08: 0000000000000000 R09: 0000000000000000
[  174.567769][ T9451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  174.567776][ T9451] R13: 00007fa785626038 R14: 00007fa785625fa0 R15: 00007ffd8df9aa88
[  174.567789][ T9451]  </TASK>
[  174.822644][ T9463] FAULT_INJECTION: forcing a failure.
[  174.822644][ T9463] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  174.822691][ T9463] CPU: 3 UID: 0 PID: 9463 Comm: syz.0.1002 Not tainted syzkaller #0 PREEMPT(full) 
[  174.822713][ T9463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  174.822723][ T9463] Call Trace:
[  174.822730][ T9463]  <TASK>
[  174.822737][ T9463]  dump_stack_lvl+0x100/0x190
[  174.822794][ T9463]  should_fail_ex.cold+0x5/0xa
[  174.822820][ T9463]  _copy_to_user+0x32/0xd0
[  174.822854][ T9463]  ctl_ioctl+0x17b/0xcc0
[  174.822894][ T9463]  ? __pfx_ctl_ioctl+0x10/0x10
[  174.822943][ T9463]  ? selinux_file_ioctl+0x1e0/0x290
[  174.822973][ T9463]  dm_ctl_ioctl+0x22/0x30
[  174.822994][ T9463]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[  174.823016][ T9463]  __x64_sys_ioctl+0x18e/0x210
[  174.823050][ T9463]  do_syscall_64+0x123/0x790
[  174.823085][ T9463]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.823104][ T9463] RIP: 0033:0x7fb44c99f559
[  174.823119][ T9463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  174.823135][ T9463] RSP: 002b:00007fb44d877028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  174.823152][ T9463] RAX: ffffffffffffffda RBX: 00007fb44cc25fa0 RCX: 00007fb44c99f559
[  174.823164][ T9463] RDX: 00002000000003c0 RSI: 00000000c138fd09 RDI: 0000000000000003
[  174.823175][ T9463] RBP: 00007fb44d877090 R08: 0000000000000000 R09: 0000000000000000
[  174.823185][ T9463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  174.823195][ T9463] R13: 00007fb44cc26038 R14: 00007fb44cc25fa0 R15: 00007ffe666e2648
[  174.823219][ T9463]  </TASK>
[  174.823677][ T9463] device-mapper: ioctl: The device has no table.
[  174.823935][ T9463] device-mapper: ioctl: The device has no table.
[  174.908306][ T9466] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12
[  175.255209][ T9488] FAULT_INJECTION: forcing a failure.
[  175.255209][ T9488] name failslab, interval 1, probability 0, space 0, times 0
[  175.255240][ T9488] CPU: 3 UID: 0 PID: 9488 Comm: syz.2.1008 Not tainted syzkaller #0 PREEMPT(full) 
[  175.255262][ T9488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  175.255275][ T9488] Call Trace:
[  175.255281][ T9488]  <TASK>
[  175.255289][ T9488]  dump_stack_lvl+0x100/0x190
[  175.255321][ T9488]  should_fail_ex.cold+0x5/0xa
[  175.255351][ T9488]  should_failslab+0xc2/0x120
[  175.255393][ T9488]  __kmalloc_cache_node_noprof+0x94/0x710
[  175.255430][ T9488]  ? __alloc_workqueue+0xa4f/0x1900
[  175.255462][ T9488]  __alloc_workqueue+0xa4f/0x1900
[  175.255490][ T9488]  ? __mutex_unlock_slowpath+0x35d/0x930
[  175.255523][ T9488]  alloc_workqueue_noprof+0xc7/0x130
[  175.255548][ T9488]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  175.255580][ T9488]  ? __ceph_monc_want_map+0x189/0x360
[  175.255609][ T9488]  ? ceph_get_tree+0x399/0x1fd0
[  175.255653][ T9488]  ceph_get_tree+0x3fa/0x1fd0
[  175.255677][ T9488]  ? security_capable+0x80/0x260
[  175.255706][ T9488]  vfs_get_tree+0x92/0x320
[  175.255737][ T9488]  path_mount+0x7d0/0x2850
[  175.255763][ T9488]  ? __pfx_path_mount+0x10/0x10
[  175.255782][ T9488]  ? lockdep_hardirqs_on+0x7d/0x110
[  175.255814][ T9488]  ? putname+0xb1/0x110
[  175.255830][ T9488]  ? kmem_cache_free+0x127/0x6c0
[  175.255858][ T9488]  ? __x64_sys_mount+0x293/0x310
[  175.255878][ T9488]  __x64_sys_mount+0x293/0x310
[  175.255899][ T9488]  ? __pfx___x64_sys_mount+0x10/0x10
[  175.255927][ T9488]  do_syscall_64+0x123/0x790
[  175.255958][ T9488]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.255978][ T9488] RIP: 0033:0x7fa78539f559
[  175.255994][ T9488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  175.256012][ T9488] RSP: 002b:00007fa78622b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  175.256030][ T9488] RAX: ffffffffffffffda RBX: 00007fa785625fa0 RCX: 00007fa78539f559
[  175.256042][ T9488] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 00002000000005c0
[  175.256054][ T9488] RBP: 00007fa785436b20 R08: 0000000000000000 R09: 0000000000000000
[  175.256065][ T9488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  175.256076][ T9488] R13: 00007fa785626038 R14: 00007fa785625fa0 R15: 00007ffd8df9aa88
[  175.256103][ T9488]  </TASK>
[  175.568191][ T5874] usb 7-1: new full-speed USB device number 16 using dummy_hcd
[  175.719659][ T5874] usb 7-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  175.720695][ T5874] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[  175.720716][ T5874] usb 7-1: config 0 has no interface number 0
[  175.720747][ T5874] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  175.720774][ T5874] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  175.720798][ T5874] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  175.724757][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  175.724785][ T5874] usb 7-1: Product: syz
[  175.724798][ T5874] usb 7-1: SerialNumber: syz
[  175.727817][ T5874] usb 7-1: config 0 descriptor??
[  175.733936][ T5874] cm109 7-1:0.8: invalid payload size 0, expected 4
[  175.736002][ T5874] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input7
[  176.326763][   T42] kauditd_printk_skb: 5 callbacks suppressed
[  176.326780][   T42] audit: type=1400 audit(1793096662.485:658): avc:  denied  { write } for  pid=9510 comm="syz.5.1014" name="fb0" dev="devtmpfs" ino=2874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  176.390759][ T9512] »»»»»»: renamed from vlan0 (while UP)
[  176.491823][ T9522] autofs: Unknown parameter '/sys/kernel/debug/sync/info'
[  176.499081][   T42] audit: type=1400 audit(1793096662.655:659): avc:  denied  { create } for  pid=9521 comm="syz.5.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  176.499517][   T42] audit: type=1400 audit(1793096662.665:660): avc:  denied  { ioctl } for  pid=9521 comm="syz.5.1016" path="socket:[52018]" dev="sockfs" ino=52018 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  176.499831][   T42] audit: type=1400 audit(1793096662.665:661): avc:  denied  { bind } for  pid=9521 comm="syz.5.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  176.874721][ T9525] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  176.874737][ T9525] block device autoloading is deprecated and will be removed.
[  176.990423][ T9528] FAULT_INJECTION: forcing a failure.
[  176.990423][ T9528] name failslab, interval 1, probability 0, space 0, times 0
[  176.990453][ T9528] CPU: 2 UID: 0 PID: 9528 Comm: syz.0.1019 Not tainted syzkaller #0 PREEMPT(full) 
[  176.990466][ T9528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  176.990473][ T9528] Call Trace:
[  176.990477][ T9528]  <TASK>
[  176.990482][ T9528]  dump_stack_lvl+0x100/0x190
[  176.990565][ T9528]  should_fail_ex.cold+0x5/0xa
[  176.990584][ T9528]  should_failslab+0xc2/0x120
[  176.990612][ T9528]  __kmalloc_cache_node_noprof+0x94/0x710
[  176.990636][ T9528]  ? __alloc_workqueue+0xa4f/0x1900
[  176.990655][ T9528]  __alloc_workqueue+0xa4f/0x1900
[  176.990672][ T9528]  ? __mutex_unlock_slowpath+0x35d/0x930
[  176.990707][ T9528]  alloc_workqueue_noprof+0xc7/0x130
[  176.990722][ T9528]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  176.990741][ T9528]  ? __ceph_monc_want_map+0x189/0x360
[  176.990760][ T9528]  ? ceph_get_tree+0x399/0x1fd0
[  176.990787][ T9528]  ceph_get_tree+0x3fa/0x1fd0
[  176.990801][ T9528]  ? security_capable+0x80/0x260
[  176.990823][ T9528]  vfs_get_tree+0x92/0x320
[  176.990842][ T9528]  path_mount+0x7d0/0x2850
[  176.990863][ T9528]  ? __pfx_path_mount+0x10/0x10
[  176.990875][ T9528]  ? lockdep_hardirqs_on+0x7d/0x110
[  176.990892][ T9528]  ? putname+0xb1/0x110
[  176.990901][ T9528]  ? kmem_cache_free+0x127/0x6c0
[  176.990916][ T9528]  ? __x64_sys_mount+0x293/0x310
[  176.990927][ T9528]  __x64_sys_mount+0x293/0x310
[  176.990939][ T9528]  ? __pfx___x64_sys_mount+0x10/0x10
[  176.990957][ T9528]  do_syscall_64+0x123/0x790
[  176.990975][ T9528]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.990987][ T9528] RIP: 0033:0x7fb44c99f559
[  176.990998][ T9528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  176.991009][ T9528] RSP: 002b:00007fb44d877028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  176.991027][ T9528] RAX: ffffffffffffffda RBX: 00007fb44cc25fa0 RCX: 00007fb44c99f559
[  176.991036][ T9528] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 00002000000005c0
[  176.991043][ T9528] RBP: 00007fb44ca36b20 R08: 0000000000000000 R09: 0000000000000000
[  176.991049][ T9528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  176.991055][ T9528] R13: 00007fb44cc26038 R14: 00007fb44cc25fa0 R15: 00007ffe666e2648
[  176.991070][ T9528]  </TASK>
[  177.046071][ T9525] md/raid:md5: device ram11 operational as raid disk 1
[  177.046085][ T9525] md/raid:md5: device ram10 operational as raid disk 0
[  177.056726][ T9525] md/raid:md5: raid level 5 active with 2 out of 3 devices, algorithm 2
[  177.059671][ T9525] md5: detected capacity change from 0 to 8192
[  177.190912][   T42] audit: type=1400 audit(1793096663.355:662): avc:  denied  { bind } for  pid=9537 comm="syz.1.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  177.191365][   T42] audit: type=1400 audit(1793096663.355:663): avc:  denied  { listen } for  pid=9537 comm="syz.1.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  177.204637][ T9525] md5: detected capacity change from 8192 to 0
[  177.204655][ T9525] md: md5 stopped.
[  177.208571][   T42] audit: type=1400 audit(1793096663.375:664): avc:  denied  { write } for  pid=9537 comm="syz.1.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  177.285395][ T9540] device-mapper: table: 248:0: thin-pool: Error opening metadata block device (-ENOENT)
[  177.285420][ T9540] device-mapper: ioctl: error adding target to table
[  177.285942][ T9540] device-mapper: ioctl: The device has no table.
[  177.286389][ T9540] device-mapper: ioctl: The device has no table.
[  178.261938][ T9569] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  178.261961][ T9569] block device autoloading is deprecated and will be removed.
[  178.349827][   T10] usb 7-1: USB disconnect, device number 16
[  178.350632][    C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  178.350651][    C2] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  178.364004][   T10] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  178.408678][ T9569] md: could not open device unknown-block(1,1).
[  178.408708][ T9569] md: error, md_import_device() returned -16
[  178.440772][ T9569] md/raid:md0: device ram0 operational as raid disk 0
[  178.461748][ T9569] md/raid:md0: not enough operational devices (2/3 failed)
[  178.919127][ T9569] md/raid:md0: failed to run raid set.
[  178.919138][ T9569] md: pers->run() failed ...
[  178.919708][ T9572] md: md0 stopped.
[  178.989595][ T9591] comedi comedi2: comedi_config --init_data is deprecated
[  179.046935][   T42] audit: type=1400 audit(1793096665.205:665): avc:  denied  { create } for  pid=9590 comm="syz.0.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  179.047964][   T42] audit: type=1400 audit(1793096665.205:666): avc:  denied  { write } for  pid=9590 comm="syz.0.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  179.061507][ T9591] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.062269][ T9591] netlink: 'syz.0.1035': attribute type 16 has an invalid length.
[  179.062280][ T9591] netlink: 'syz.0.1035': attribute type 17 has an invalid length.
[  179.079545][ T9591] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.082874][ T9591] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.224224][   T42] audit: type=1400 audit(1793096665.375:667): avc:  denied  { mount } for  pid=9598 comm="syz.1.1038" name="/" dev="autofs" ino=54534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  179.302146][ T9612] overlayfs: regular lower layers cannot follow data lower layers
[  179.305526][ T9612] overlayfs: regular lower layers cannot follow data lower layers
[  179.486571][ T9620] netlink: 'syz.1.1042': attribute type 83 has an invalid length.
[  179.658520][ T9632] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  179.658556][ T9632] block device autoloading is deprecated and will be removed.
[  179.838602][ T9633] md: could not open device unknown-block(1,4).
[  179.838655][ T9633] md: error, md_import_device() returned -16
[  179.908352][ T9632] md: could not open device unknown-block(1,5).
[  179.908401][ T9632] md: error, md_import_device() returned -16
[  179.972926][ T9639] comedi comedi2: comedi_config --init_data is deprecated
[  179.999491][ T9641] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  179.999512][ T9641] block device autoloading is deprecated and will be removed.
[  180.042502][ T9639] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.045654][ T9639] netlink: 'syz.2.1048': attribute type 16 has an invalid length.
[  180.045672][ T9639] netlink: 'syz.2.1048': attribute type 17 has an invalid length.
[  180.079375][ T9639] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.081123][ T9639] 8021q: adding VLAN 0 to HW filter on device team0
[  180.086277][ T9639] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.098706][ T9641] md: could not open device unknown-block(1,1).
[  180.098754][ T9641] md: error, md_import_device() returned -16
[  180.121650][ T9641] md/raid:md0: device ram0 operational as raid disk 0
[  180.139096][ T9646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1050'.
[  180.144474][ T9639] veth1_vlan: left promiscuous mode
[  180.145313][ T9641] md/raid:md0: not enough operational devices (2/3 failed)
[  180.145524][ T9639] veth0_vlan: left promiscuous mode
[  180.147067][ T9639] veth0_vlan: entered promiscuous mode
[  180.148628][ T9639] veth1_vlan: entered promiscuous mode
[  180.153895][ T9639] veth1_macvtap: left promiscuous mode
[  180.154879][ T9639] veth0_macvtap: left promiscuous mode
[  180.155802][ T9639] veth0_macvtap: entered promiscuous mode
[  180.156860][ T9639] veth1_macvtap: entered promiscuous mode
[  180.165336][ T9639] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  180.166436][ T9639] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  180.167931][ T9639] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  180.169349][ T9639] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  180.172571][ T9639] 8021q: adding VLAN 0 to HW filter on device bond1
[  180.173210][ T9639] bond2: left allmulticast mode
[  180.173790][ T9639] bond3: left allmulticast mode
[  180.174372][ T9639] bond4: left allmulticast mode
[  180.179107][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.179153][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.179183][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.179212][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.349485][ T9641] md/raid:md0: failed to run raid set.
[  180.349497][ T9641] md: pers->run() failed ...
[  180.349531][ T9648] md: md0 stopped.
[  180.401218][ T9651] nvme_fabrics: unknown parameter or missing value 'ra' in ctrl creation request
[  180.810960][ T9667] ͺͺͺͺͺ»: renamed from dummy0 (while UP)
[  180.811124][ T9667] FAULT_INJECTION: forcing a failure.
[  180.811124][ T9667] name failslab, interval 1, probability 0, space 0, times 0
[  180.811149][ T9667] CPU: 3 UID: 0 PID: 9667 Comm: syz.2.1057 Not tainted syzkaller #0 PREEMPT(full) 
[  180.811163][ T9667] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  180.811170][ T9667] Call Trace:
[  180.811178][ T9667]  <TASK>
[  180.811185][ T9667]  dump_stack_lvl+0x100/0x190
[  180.811226][ T9667]  should_fail_ex.cold+0x5/0xa
[  180.811263][ T9667]  should_failslab+0xc2/0x120
[  180.811306][ T9667]  __kmalloc_noprof+0xfc/0x840
[  180.811335][ T9667]  ? kobject_rename+0xf1/0x260
[  180.811355][ T9667]  kobject_rename+0xf1/0x260
[  180.811369][ T9667]  ? __pfx_kobject_rename+0x10/0x10
[  180.811386][ T9667]  ? kernfs_put+0x3f/0x60
[  180.811411][ T9667]  device_rename+0x130/0x250
[  180.811443][ T9667]  netif_change_name+0x284/0x830
[  180.811460][ T9667]  ? __pfx_netif_change_name+0x10/0x10
[  180.811477][ T9667]  dev_change_name+0xb2/0x260
[  180.811492][ T9667]  dev_ifsioc+0x16b3/0x1f70
[  180.811506][ T9667]  ? __pfx_dev_ifsioc+0x10/0x10
[  180.811518][ T9667]  ? __pfx___mutex_lock+0x10/0x10
[  180.811541][ T9667]  ? bpf_lsm_capable+0x9/0x10
[  180.811567][ T9667]  dev_ioctl+0x223/0x10e0
[  180.811580][ T9667]  sock_do_ioctl+0x1a0/0x280
[  180.811595][ T9667]  ? __pfx_sock_do_ioctl+0x10/0x10
[  180.811609][ T9667]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  180.811636][ T9667]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  180.811656][ T9667]  ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530
[  180.811677][ T9667]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  180.811691][ T9667]  sock_ioctl+0x599/0x6b0
[  180.811705][ T9667]  ? __pfx_sock_ioctl+0x10/0x10
[  180.811723][ T9667]  ? selinux_file_ioctl+0x1e0/0x290
[  180.811734][ T9667]  ? selinux_file_ioctl+0x1e7/0x290
[  180.811749][ T9667]  ? __pfx_sock_ioctl+0x10/0x10
[  180.811764][ T9667]  __x64_sys_ioctl+0x18e/0x210
[  180.811779][ T9667]  do_syscall_64+0x123/0x790
[  180.811796][ T9667]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.811808][ T9667] RIP: 0033:0x7fa78539f559
[  180.811818][ T9667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  180.811828][ T9667] RSP: 002b:00007fa78622b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  180.811848][ T9667] RAX: ffffffffffffffda RBX: 00007fa785625fa0 RCX: 00007fa78539f559
[  180.811856][ T9667] RDX: 0000200000000500 RSI: 0000000000008923 RDI: 0000000000000007
[  180.811864][ T9667] RBP: 00007fa785436b20 R08: 0000000000000000 R09: 0000000000000000
[  180.811870][ T9667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  180.811877][ T9667] R13: 00007fa785626038 R14: 00007fa785625fa0 R15: 00007ffd8df9aa88
[  180.811892][ T9667]  </TASK>
[  180.938326][ T5874] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  181.094430][ T5874] usb 5-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00
[  181.096110][ T5874] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  181.096134][ T5874] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  181.096153][ T5874] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  181.096187][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.104948][ T9664] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  181.105119][ T9664] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  181.109717][ T5874] pl2303 5-1:1.0: pl2303 converter detected
[  181.119378][ T5874] usb 5-1: pl2303 converter now attached to ttyUSB0
[  181.149209][ T9682] comedi comedi2: comedi_config --init_data is deprecated
[  181.205704][ T9682] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.206171][ T9682] netlink: 'syz.1.1060': attribute type 16 has an invalid length.
[  181.206181][ T9682] netlink: 'syz.1.1060': attribute type 17 has an invalid length.
[  181.229557][ T9682] 8021q: adding VLAN 0 to HW filter on device team0
[  181.232346][ T9682] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.254680][ T9682] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  181.254696][ T9682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  181.259165][ T9682] veth1_vlan: left promiscuous mode
[  181.259717][ T9682] veth0_vlan: left promiscuous mode
[  181.260757][ T9682] veth0_vlan: entered promiscuous mode
[  181.262865][ T9682] veth1_vlan: entered promiscuous mode
[  181.267045][ T9682] veth1_macvtap: left promiscuous mode
[  181.267582][ T9682] veth0_macvtap: left promiscuous mode
[  181.268215][ T9682] veth0_macvtap: entered promiscuous mode
[  181.268719][ T9682] veth1_macvtap: entered promiscuous mode
[  181.272034][ T9682] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  181.272882][ T9682] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  181.273460][ T9682] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  181.273976][ T9682] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  181.275525][ T9682] bond1: left allmulticast mode
[  181.275536][ T9682] ip6gretap1: left allmulticast mode
[  181.275755][ T9682] 8021q: adding VLAN 0 to HW filter on device bond1
[  181.277430][ T9682] bond0: left allmulticast mode
[  181.277761][ T9682] vlan2: left promiscuous mode
[  181.277770][ T9682] hsr0: left promiscuous mode
[  181.277880][ T9682] vlan2: left allmulticast mode
[  181.277887][ T9682] hsr0: left allmulticast mode
[  181.277893][ T9682] hsr_slave_0: left allmulticast mode
[  181.277901][ T9682] hsr_slave_1: left allmulticast mode
[  181.298183][ T5860] bond1: (slave ip6gretap1): link status up again after 0 ms
[  181.319929][ T7119] bond1: (slave ip6gretap1): link status up again after 0 ms
[  181.348966][   T13] bond1: (slave ip6gretap1): link status up again after 0 ms
[  181.348985][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  181.349023][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.360559][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.360602][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.360632][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.448801][ T9696] FAULT_INJECTION: forcing a failure.
[  181.448801][ T9696] name failslab, interval 1, probability 0, space 0, times 0
[  181.448836][ T9696] CPU: 1 UID: 0 PID: 9696 Comm: syz.2.1065 Not tainted syzkaller #0 PREEMPT(full) 
[  181.448851][ T9696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.448858][ T9696] Call Trace:
[  181.448862][ T9696]  <TASK>
[  181.448867][ T9696]  dump_stack_lvl+0x100/0x190
[  181.448895][ T9696]  should_fail_ex.cold+0x5/0xa
[  181.448912][ T9696]  should_failslab+0xc2/0x120
[  181.448938][ T9696]  __kmalloc_cache_noprof+0x91/0x6d0
[  181.448958][ T9696]  ? __alloc_workqueue+0xc54/0x1900
[  181.448977][ T9696]  __alloc_workqueue+0xc54/0x1900
[  181.448996][ T9696]  ? __mutex_unlock_slowpath+0x35d/0x930
[  181.449019][ T9696]  alloc_workqueue_noprof+0xc7/0x130
[  181.449035][ T9696]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  181.449053][ T9696]  ? __ceph_monc_want_map+0x189/0x360
[  181.449071][ T9696]  ? ceph_get_tree+0x399/0x1fd0
[  181.449093][ T9696]  ceph_get_tree+0x3fa/0x1fd0
[  181.449106][ T9696]  ? security_capable+0x80/0x260
[  181.449136][ T9696]  vfs_get_tree+0x92/0x320
[  181.449155][ T9696]  path_mount+0x7d0/0x2850
[  181.449178][ T9696]  ? __pfx_path_mount+0x10/0x10
[  181.449190][ T9696]  ? lockdep_hardirqs_on+0x7d/0x110
[  181.449207][ T9696]  ? putname+0xb1/0x110
[  181.449217][ T9696]  ? kmem_cache_free+0x127/0x6c0
[  181.449233][ T9696]  ? __x64_sys_mount+0x293/0x310
[  181.449246][ T9696]  __x64_sys_mount+0x293/0x310
[  181.449259][ T9696]  ? __pfx___x64_sys_mount+0x10/0x10
[  181.449277][ T9696]  do_syscall_64+0x123/0x790
[  181.449296][ T9696]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.449308][ T9696] RIP: 0033:0x7fa78539f559
[  181.449321][ T9696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  181.449332][ T9696] RSP: 002b:00007fa78622b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  181.449344][ T9696] RAX: ffffffffffffffda RBX: 00007fa785625fa0 RCX: 00007fa78539f559
[  181.449351][ T9696] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 00002000000005c0
[  181.449358][ T9696] RBP: 00007fa785436b20 R08: 0000000000000000 R09: 0000000000000000
[  181.449365][ T9696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  181.449371][ T9696] R13: 00007fa785626038 R14: 00007fa785625fa0 R15: 00007ffd8df9aa88
[  181.449387][ T9696]  </TASK>
[  181.469880][ T7119] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  181.515982][ T1487] usb 5-1: USB disconnect, device number 11
[  181.523983][ T1487] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  181.524306][ T1487] pl2303 5-1:1.0: device disconnected
[  181.528960][ T9704] ͺͺͺͺͺ»: renamed from dummy0 (while UP)
[  181.529041][ T9704] FAULT_INJECTION: forcing a failure.
[  181.529041][ T9704] name failslab, interval 1, probability 0, space 0, times 0
[  181.529057][ T9704] CPU: 3 UID: 0 PID: 9704 Comm: syz.2.1067 Not tainted syzkaller #0 PREEMPT(full) 
[  181.529069][ T9704] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.529076][ T9704] Call Trace:
[  181.529080][ T9704]  <TASK>
[  181.529086][ T9704]  dump_stack_lvl+0x100/0x190
[  181.529107][ T9704]  should_fail_ex.cold+0x5/0xa
[  181.529124][ T9704]  should_failslab+0xc2/0x120
[  181.529142][ T9704]  __kmalloc_noprof+0xfc/0x840
[  181.529158][ T9704]  ? kobject_rename+0xf1/0x260
[  181.529174][ T9704]  kobject_rename+0xf1/0x260
[  181.529187][ T9704]  ? __pfx_kobject_rename+0x10/0x10
[  181.529201][ T9704]  ? kernfs_put+0x3f/0x60
[  181.529225][ T9704]  device_rename+0x130/0x250
[  181.529248][ T9704]  netif_change_name+0x284/0x830
[  181.529263][ T9704]  ? __pfx_netif_change_name+0x10/0x10
[  181.529280][ T9704]  dev_change_name+0xb2/0x260
[  181.529295][ T9704]  dev_ifsioc+0x16b3/0x1f70
[  181.529310][ T9704]  ? __pfx_dev_ifsioc+0x10/0x10
[  181.529321][ T9704]  ? __pfx___mutex_lock+0x10/0x10
[  181.529345][ T9704]  ? bpf_lsm_capable+0x9/0x10
[  181.529371][ T9704]  dev_ioctl+0x223/0x10e0
[  181.529384][ T9704]  sock_do_ioctl+0x1a0/0x280
[  181.529399][ T9704]  ? __pfx_sock_do_ioctl+0x10/0x10
[  181.529413][ T9704]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  181.529438][ T9704]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  181.529452][ T9704]  ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530
[  181.529467][ T9704]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  181.529482][ T9704]  sock_ioctl+0x599/0x6b0
[  181.529497][ T9704]  ? __pfx_sock_ioctl+0x10/0x10
[  181.529517][ T9704]  ? selinux_file_ioctl+0x1e0/0x290
[  181.529528][ T9704]  ? selinux_file_ioctl+0x1e7/0x290
[  181.529540][ T9704]  ? __pfx_sock_ioctl+0x10/0x10
[  181.529556][ T9704]  __x64_sys_ioctl+0x18e/0x210
[  181.529571][ T9704]  do_syscall_64+0x123/0x790
[  181.529589][ T9704]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.529601][ T9704] RIP: 0033:0x7fa78539f559
[  181.529611][ T9704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  181.529621][ T9704] RSP: 002b:00007fa78622b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  181.529632][ T9704] RAX: ffffffffffffffda RBX: 00007fa785625fa0 RCX: 00007fa78539f559
[  181.529639][ T9704] RDX: 0000200000000500 RSI: 0000000000008923 RDI: 0000000000000007
[  181.529651][ T9704] RBP: 00007fa785436b20 R08: 0000000000000000 R09: 0000000000000000
[  181.529658][ T9704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  181.529665][ T9704] R13: 00007fa785626038 R14: 00007fa785625fa0 R15: 00007ffd8df9aa88
[  181.529682][ T9704]  </TASK>
[  181.588185][ T7119] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  181.675946][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1068'.
[  181.698141][ T7119] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  182.079101][ T9718] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer.
[  182.079700][ T9718] kvm: user requested TSC rate below hardware speed
[  182.137500][ T9723] iommufd_mock iommufd_mock0: Adding to iommu group 10
[  182.368573][ T9726] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  182.368588][ T9726] block device autoloading is deprecated and will be removed.
[  182.407183][   T42] kauditd_printk_skb: 2 callbacks suppressed
[  182.407200][   T42] audit: type=1326 audit(1793096668.565:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9705 comm="syz.2.1068" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78539f559 code=0x7fc00000
[  182.496112][ T9734] iommufd_mock iommufd_mock0: Adding to iommu group 10
[  182.551166][ T9737] FAULT_INJECTION: forcing a failure.
[  182.551166][ T9737] name failslab, interval 1, probability 0, space 0, times 0
[  182.551196][ T9737] CPU: 2 UID: 0 PID: 9737 Comm: syz.2.1076 Not tainted syzkaller #0 PREEMPT(full) 
[  182.551218][ T9737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  182.551230][ T9737] Call Trace:
[  182.551237][ T9737]  <TASK>
[  182.551244][ T9737]  dump_stack_lvl+0x100/0x190
[  182.551277][ T9737]  should_fail_ex.cold+0x5/0xa
[  182.551305][ T9737]  should_failslab+0xc2/0x120
[  182.551331][ T9737]  __kmalloc_cache_node_noprof+0x94/0x710
[  182.551358][ T9737]  ? __alloc_workqueue+0xa4f/0x1900
[  182.551390][ T9737]  __alloc_workqueue+0xa4f/0x1900
[  182.551422][ T9737]  ? __mutex_unlock_slowpath+0x35d/0x930
[  182.551454][ T9737]  alloc_workqueue_noprof+0xc7/0x130
[  182.551481][ T9737]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  182.551514][ T9737]  ? __ceph_monc_want_map+0x189/0x360
[  182.551547][ T9737]  ? ceph_get_tree+0x399/0x1fd0
[  182.551574][ T9737]  ceph_get_tree+0x3fa/0x1fd0
[  182.551597][ T9737]  ? security_capable+0x80/0x260
[  182.551625][ T9737]  vfs_get_tree+0x92/0x320
[  182.551647][ T9737]  path_mount+0x7d0/0x2850
[  182.551673][ T9737]  ? __pfx_path_mount+0x10/0x10
[  182.551693][ T9737]  ? lockdep_hardirqs_on+0x7d/0x110
[  182.551724][ T9737]  ? putname+0xb1/0x110
[  182.551741][ T9737]  ? kmem_cache_free+0x127/0x6c0
[  182.551769][ T9737]  ? __x64_sys_mount+0x293/0x310
[  182.551789][ T9737]  __x64_sys_mount+0x293/0x310
[  182.551811][ T9737]  ? __pfx___x64_sys_mount+0x10/0x10
[  182.551841][ T9737]  do_syscall_64+0x123/0x790
[  182.551871][ T9737]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.551892][ T9737] RIP: 0033:0x7fa78539f559
[  182.551909][ T9737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  182.551926][ T9737] RSP: 002b:00007fa78622b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  182.551945][ T9737] RAX: ffffffffffffffda RBX: 00007fa785625fa0 RCX: 00007fa78539f559
[  182.551958][ T9737] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 00002000000005c0
[  182.551971][ T9737] RBP: 00007fa785436b20 R08: 0000000000000000 R09: 0000000000000000
[  182.551983][ T9737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.551995][ T9737] R13: 00007fa785626038 R14: 00007fa785625fa0 R15: 00007ffd8df9aa88
[  182.552022][ T9737]  </TASK>
[  182.560559][ T9726] md/raid:md0: device ram0 operational as raid disk 0
[  182.580469][ T9726] md/raid:md0: not enough operational devices (2/3 failed)
[  182.771479][ T9726] md/raid:md0: failed to run raid set.
[  182.771495][ T9726] md: pers->run() failed ...
[  182.773913][ T9728] md: could not open device unknown-block(1,1).
[  182.773961][ T9728] md: error, md_import_device() returned -16
[  183.124839][ T9763] syzkaller0: entered promiscuous mode
[  183.124861][ T9763] syzkaller0: entered allmulticast mode
[  183.129997][   T42] audit: type=1400 audit(1793096669.285:671): avc:  denied  { setopt } for  pid=9762 comm="syz.2.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  183.130059][   T42] audit: type=1400 audit(1793096669.285:672): avc:  denied  { write } for  pid=9762 comm="syz.2.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  183.243077][ T9765] FAULT_INJECTION: forcing a failure.
[  183.243077][ T9765] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  183.243131][ T9765] CPU: 0 UID: 0 PID: 9765 Comm: syz.1.1084 Not tainted syzkaller #0 PREEMPT(full) 
[  183.243153][ T9765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  183.243164][ T9765] Call Trace:
[  183.243171][ T9765]  <TASK>
[  183.243178][ T9765]  dump_stack_lvl+0x100/0x190
[  183.243220][ T9765]  should_fail_ex.cold+0x5/0xa
[  183.243247][ T9765]  _copy_from_user+0x2e/0xd0
[  183.243286][ T9765]  copy_msghdr_from_user+0x9f/0x4c0
[  183.243318][ T9765]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  183.243347][ T9765]  ? lock_acquire+0x1d1/0x380
[  183.243378][ T9765]  ? get_pid_task+0x2a/0x250
[  183.243406][ T9765]  ___sys_sendmsg+0x106/0x1e0
[  183.243431][ T9765]  ? __pfx____sys_sendmsg+0x10/0x10
[  183.243454][ T9765]  ? get_pid_task+0x106/0x250
[  183.243491][ T9765]  ? find_held_lock+0x2b/0x80
[  183.243525][ T9765]  __sys_sendmsg+0x160/0x210
[  183.243546][ T9765]  ? __pfx___sys_sendmsg+0x10/0x10
[  183.243579][ T9765]  do_syscall_64+0x123/0x790
[  183.243614][ T9765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.243634][ T9765] RIP: 0033:0x7f6f9819f559
[  183.243650][ T9765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  183.243667][ T9765] RSP: 002b:00007f6f99111028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  183.243691][ T9765] RAX: ffffffffffffffda RBX: 00007f6f98425fa0 RCX: 00007f6f9819f559
[  183.243703][ T9765] RDX: 0000000020000040 RSI: 0000200000000200 RDI: 0000000000000003
[  183.243715][ T9765] RBP: 00007f6f99111090 R08: 0000000000000000 R09: 0000000000000000
[  183.243726][ T9765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  183.243738][ T9765] R13: 00007f6f98426038 R14: 00007f6f98425fa0 R15: 00007ffe136268f8
[  183.243765][ T9765]  </TASK>
[  183.380810][ T9769] Console: switching to colour dummy device 80x25
[  183.500168][ T9770] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint
[  183.528730][ T9770] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]
[  183.528924][ T9770] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]
[  183.529002][ T9770] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]
[  183.529124][ T9770] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  183.529910][ T9770] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  183.570261][ T9770] pci 0000:00:01.0: Adding to iommu group 1
[  183.585497][ T9770] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  183.585519][ T9770] pci 0000:00:01.0: vgaarb: bridge control possible
[  183.585532][ T9770] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  183.605026][ T9770] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned
[  183.605185][ T9770] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned
[  183.621757][ T9770] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned
[  183.697808][ T9770] [drm] pci: virtio-vga detected at 0000:00:01.0
[  183.697908][ T9770] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console
[  183.705623][ T9770] [drm] features: -virgl +edid -resource_blob -host_visible
[  183.705639][ T9770] [drm] features: -context_init -blob_alignment
[  183.714202][   T42] audit: type=1326 audit(1793096669.875:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.0.1081" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44c99f559 code=0x7fc00000
[  183.732250][ T9770] ------------[ cut here ]------------
[  183.732264][ T9770] kmem_cache of name 'virtio-gpu-vbufs' already exists
[  183.732274][ T9770] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xab/0x440, CPU#3: syz.1.1085/9770
[  183.742604][ T9770] Modules linked in:
[  183.744289][ T9770] CPU: 3 UID: 0 PID: 9770 Comm: syz.1.1085 Not tainted syzkaller #0 PREEMPT(full) 
[  183.748339][ T9770] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  183.752604][ T9770] RIP: 0010:__kmem_cache_create_args+0xae/0x440
[  183.755256][ T9770] Code: 48 8b 43 60 48 8d 58 a0 48 3d d0 4c 1a 90 74 1f 48 8b 7b 58 48 89 ee e8 20 09 81 09 85 c0 75 e0 48 8d 3d 65 b4 09 10 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 a0 0a 81 09 48 85 c0 0f
[  183.763321][ T9770] RSP: 0018:ffffc900052def18 EFLAGS: 00010246
[  183.765894][ T9770] RAX: 0000000000000000 RBX: ffff8880268203c0 RCX: fffff52000a5bdbe
[  183.769170][ T9770] RDX: 0000000000000000 RSI: ffffffff8cb2a920 RDI: ffffffff926e1a10
[  183.772463][ T9770] RBP: ffffffff8cb2a920 R08: 0000000000000000 R09: fffffbfff24d30eb
[  183.775786][ T9770] R10: ffffc900052def18 R11: 0000000000000000 R12: 0000000000000000
[  183.779257][ T9770] R13: ffffc900052def88 R14: 00000000000000d8 R15: ffff88805ce15cce
[  183.782595][ T9770] FS:  00007f6f990f06c0(0000) GS:ffff8880d479c000(0000) knlGS:0000000000000000
[  183.786251][ T9770] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  183.789244][ T9770] CR2: 0000001b2e8e7ff8 CR3: 00000001001fb000 CR4: 0000000000352ef0
[  183.790986][ T9776] ip6gretap0: entered promiscuous mode
[  183.794938][ T9770] Call Trace:
[  183.796418][ T9770]  <TASK>
[  183.797738][ T9770]  virtio_gpu_alloc_vbufs+0xc2/0x150
[  183.800292][ T9770]  ? __pfx__printk+0x10/0x10
[  183.802260][ T9770]  ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10
[  183.804785][ T9770]  ? lockdep_init_map_type+0x5c/0x250
[  183.807109][ T9770]  virtio_gpu_init.cold+0x40d/0x127f
[  183.809613][ T9770]  ? vga_remove_vgacon.cold+0x1d/0x99
[  183.811942][ T9770]  ? __pfx_virtio_gpu_init+0x10/0x10
[  183.814450][ T9770]  ? is_console_locked+0x9/0x20
[  183.816517][ T9770]  ? con_is_bound+0x141/0x190
[  183.818806][ T9770]  ? vga_remove_vgacon+0x21/0x30
[  183.820934][ T9770]  ? aperture_remove_conflicting_pci_devices+0x138/0x1e0
[  183.823843][ T9770]  virtio_gpu_probe+0x21c/0x360
[  183.825797][ T9770]  virtio_dev_probe+0x72a/0xd30
[  183.827773][ T9770]  ? __pfx_virtio_dev_probe+0x10/0x10
[  183.830106][ T9770]  ? kernfs_put+0x3f/0x60
[  183.831554][   T42] audit: type=1400 audit(1793096670.005:674): avc:  denied  { shutdown } for  pid=9775 comm="syz.2.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  183.839745][ T9770]  ? sysfs_do_create_link_sd+0xbb/0x140
[  183.841686][   T42] audit: type=1400 audit(1793096670.015:675): avc:  denied  { ioctl } for  pid=9775 comm="syz.2.1087" path="socket:[57023]" dev="sockfs" ino=57023 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  183.851846][ T9770]  ? sysfs_create_link+0x68/0xc0
[  183.853860][ T9770]  ? __pfx_virtio_dev_probe+0x10/0x10
[  183.855811][ T9770]  really_probe+0x241/0xa60
[  183.857358][ T9770]  __driver_probe_device+0x210/0x460
[  183.860019][ T9770]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  183.862317][ T9770]  driver_probe_device+0x4a/0x140
[  183.864389][ T9770]  __device_attach_driver+0x1df/0x320
[  183.866493][ T9770]  ? __pfx___device_attach_driver+0x10/0x10
[  183.869872][ T9770]  bus_for_each_drv+0x159/0x1e0
[  183.871943][ T9770]  ? __pfx_bus_for_each_drv+0x10/0x10
[  183.874138][ T9770]  ? lockdep_hardirqs_on+0x7d/0x110
[  183.876179][ T9770]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  183.878778][ T9770]  __device_attach+0x1e4/0x4c0
[  183.880726][ T9770]  ? __pfx___device_attach+0x10/0x10
[  183.882801][ T9770]  ? do_raw_spin_unlock+0x145/0x1e0
[  183.885001][ T9770]  device_initial_probe+0xaf/0xf0
[  183.887081][ T9770]  __bus_probe_device+0x60/0x160
[  183.889195][ T9770]  device_add+0x121d/0x1970
[  183.890979][ T9770]  ? __pfx_device_add+0x10/0x10
[  183.892963][ T9770]  ? __pfx___might_resched+0x10/0x10
[  183.895253][ T9770]  ? lockdep_init_map_type+0x5c/0x250
[  183.896845][ T9781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1087'.
[  183.900977][ T9770]  ? vp_synchronize_vectors+0x121/0x1f0
[  183.903093][ T9770]  ? __pfx_vp_set_status+0x10/0x10
[  183.904966][ T9770]  register_virtio_device+0x661/0x7c0
[  183.907034][ T9770]  ? __pfx_register_virtio_device+0x10/0x10
[  183.909450][ T9770]  ? __pfx_pcibios_set_master+0x10/0x10
[  183.911556][ T9770]  ? __raw_spin_lock_init+0x3a/0x110
[  183.913511][ T9770]  ? __pfx_virtio_pci_probe+0x10/0x10
[  183.915524][ T9770]  virtio_pci_probe+0x255/0x410
[  183.917541][ T9770]  local_pci_probe+0xdd/0x1b0
[  183.919594][ T9770]  pci_call_probe+0x176/0x800
[  183.921432][ T9770]  ? pci_match_device+0x147/0x7d0
[  183.923327][ T9770]  ? __pfx_pci_call_probe+0x10/0x10
[  183.925062][ T9770]  ? __pfx_pci_match_device+0x10/0x10
[  183.927161][ T9770]  ? pci_find_host_bridge+0x3c/0x80
[  183.929458][ T9770]  pci_device_probe+0x25b/0x400
[  183.931554][ T9770]  ? __pfx_pci_device_probe+0x10/0x10
[  183.933844][ T9770]  ? sysfs_create_link+0x68/0xc0
[  183.935958][ T9770]  ? __pfx_pci_device_probe+0x10/0x10
[  183.939416][ T9770]  really_probe+0x241/0xa60
[  183.941401][ T9770]  __driver_probe_device+0x210/0x460
[  183.943676][ T9770]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  183.946192][ T9770]  driver_probe_device+0x4a/0x140
[  183.949164][ T9770]  __device_attach_driver+0x1df/0x320
[  183.951455][ T9770]  ? __pfx___device_attach_driver+0x10/0x10
[  183.953951][ T9770]  bus_for_each_drv+0x159/0x1e0
[  183.955986][ T9770]  ? __pfx_bus_for_each_drv+0x10/0x10
[  183.958425][ T9770]  ? lockdep_hardirqs_on+0x7d/0x110
[  183.960666][ T9770]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  183.963174][ T9770]  __device_attach+0x1e4/0x4c0
[  183.965243][ T9770]  ? __pfx___device_attach+0x10/0x10
[  183.967509][ T9770]  ? do_raw_spin_unlock+0x145/0x1e0
[  183.970341][ T9770]  device_initial_probe+0xaf/0xf0
[  183.972535][ T9770]  pci_bus_add_device+0xc5/0x100
[  183.974484][ T9770]  pci_bus_add_devices+0x9a/0x1f0
[  183.976144][ T9770]  pci_rescan_bus+0x2a/0x40
[  183.977725][ T9770]  rescan_store+0xfb/0x130
[  183.979421][ T9770]  ? __pfx_rescan_store+0x10/0x10
[  183.981292][ T9770]  ? sysfs_file_kobj+0xe4/0x290
[  183.983289][ T9770]  ? __pfx_rescan_store+0x10/0x10
[  183.985379][ T9770]  bus_attr_store+0x74/0xb0
[  183.987299][ T9770]  ? __pfx_bus_attr_store+0x10/0x10
[  183.989623][ T9770]  sysfs_kf_write+0xf2/0x150
[  183.991665][ T9770]  kernfs_fop_write_iter+0x3e0/0x5f0
[  183.993910][ T9770]  ? __pfx_sysfs_kf_write+0x10/0x10
[  183.996143][ T9770]  vfs_write+0x6af/0x1050
[  183.998126][ T9770]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  184.000605][ T9770]  ? __pfx_vfs_write+0x10/0x10
[  184.002666][ T9770]  ? find_held_lock+0x2b/0x80
[  184.004661][ T9770]  ksys_write+0x12a/0x250
[  184.006530][ T9770]  ? __pfx_ksys_write+0x10/0x10
[  184.008732][ T9770]  do_syscall_64+0x123/0x790
[  184.010766][ T9770]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.013267][ T9770] RIP: 0033:0x7f6f9819f559
[  184.015205][ T9770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  184.023918][ T9770] RSP: 002b:00007f6f990f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  184.027399][ T9770] RAX: ffffffffffffffda RBX: 00007f6f98426090 RCX: 00007f6f9819f559
[  184.031177][ T9770] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000009
[  184.034392][ T9770] RBP: 00007f6f98236b20 R08: 0000000000000000 R09: 0000000000000000
[  184.037437][ T9770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.040013][ T9770] R13: 00007f6f98426128 R14: 00007f6f98426090 R15: 00007ffe136268f8
[  184.042550][ T9770]  </TASK>
[  184.043797][ T9770] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  184.046120][ T9770] CPU: 3 UID: 0 PID: 9770 Comm: syz.1.1085 Not tainted syzkaller #0 PREEMPT(full) 
[  184.049323][ T9770] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  184.052430][ T9770] Call Trace:
[  184.053646][ T9770]  <TASK>
[  184.054885][ T9770]  dump_stack_lvl+0x100/0x190
[  184.056606][ T9770]  vpanic+0x553/0x970
[  184.057990][ T9770]  ? __pfx_vpanic+0x10/0x10
[  184.059464][ T9770]  panic+0xd1/0xe0
[  184.060734][ T9770]  ? __pfx_panic+0x10/0x10
[  184.062196][ T9770]  check_panic_on_warn.cold+0x19/0x34
[  184.064004][ T9770]  ? __kmem_cache_create_args+0xab/0x440
[  184.065847][ T9770]  __warn.cold+0x191/0x318
[  184.067312][ T9770]  __report_bug+0x30f/0x440
[  184.068826][ T9770]  ? __kmem_cache_create_args+0xab/0x440
[  184.070683][ T9770]  ? __pfx___report_bug+0x10/0x10
[  184.072270][ T9770]  ? __mutex_lock+0x267/0x1c10
[  184.073872][ T9770]  ? __kmem_cache_create_args+0x44/0x440
[  184.075693][ T9770]  report_bug_entry+0xe2/0x290
[  184.077258][ T9770]  ? __kmem_cache_create_args+0xae/0x440
[  184.079078][ T9770]  handle_bug+0x1cd/0x2a0
[  184.080537][ T9770]  exc_invalid_op+0x17/0x50
[  184.081999][ T9770]  asm_exc_invalid_op+0x1a/0x20
[  184.083618][ T9770] RIP: 0010:__kmem_cache_create_args+0xae/0x440
[  184.085636][ T9770] Code: 48 8b 43 60 48 8d 58 a0 48 3d d0 4c 1a 90 74 1f 48 8b 7b 58 48 89 ee e8 20 09 81 09 85 c0 75 e0 48 8d 3d 65 b4 09 10 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 a0 0a 81 09 48 85 c0 0f
[  184.091882][ T9770] RSP: 0018:ffffc900052def18 EFLAGS: 00010246
[  184.093940][ T9770] RAX: 0000000000000000 RBX: ffff8880268203c0 RCX: fffff52000a5bdbe
[  184.096629][ T9770] RDX: 0000000000000000 RSI: ffffffff8cb2a920 RDI: ffffffff926e1a10
[  184.099294][ T9770] RBP: ffffffff8cb2a920 R08: 0000000000000000 R09: fffffbfff24d30eb
[  184.102210][ T9770] R10: ffffc900052def18 R11: 0000000000000000 R12: 0000000000000000
[  184.105222][ T9770] R13: ffffc900052def88 R14: 00000000000000d8 R15: ffff88805ce15cce
[  184.108565][ T9770]  ? __kmem_cache_create_args+0xa0/0x440
[  184.110965][ T9770]  virtio_gpu_alloc_vbufs+0xc2/0x150
[  184.113219][ T9770]  ? __pfx__printk+0x10/0x10
[  184.115194][ T9770]  ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10
[  184.117671][ T9770]  ? lockdep_init_map_type+0x5c/0x250
[  184.119991][ T9770]  virtio_gpu_init.cold+0x40d/0x127f
[  184.122260][ T9770]  ? vga_remove_vgacon.cold+0x1d/0x99
[  184.124368][ T9770]  ? __pfx_virtio_gpu_init+0x10/0x10
[  184.126370][ T9770]  ? is_console_locked+0x9/0x20
[  184.128453][ T9770]  ? con_is_bound+0x141/0x190
[  184.130421][ T9770]  ? vga_remove_vgacon+0x21/0x30
[  184.132533][ T9770]  ? aperture_remove_conflicting_pci_devices+0x138/0x1e0
[  184.135517][ T9770]  virtio_gpu_probe+0x21c/0x360
[  184.137644][ T9770]  virtio_dev_probe+0x72a/0xd30
[  184.139718][ T9770]  ? __pfx_virtio_dev_probe+0x10/0x10
[  184.141910][ T9770]  ? kernfs_put+0x3f/0x60
[  184.143405][ T9770]  ? sysfs_do_create_link_sd+0xbb/0x140
[  184.145243][ T9770]  ? sysfs_create_link+0x68/0xc0
[  184.146984][ T9770]  ? __pfx_virtio_dev_probe+0x10/0x10
[  184.148887][ T9770]  really_probe+0x241/0xa60
[  184.150810][ T9770]  __driver_probe_device+0x210/0x460
[  184.153045][ T9770]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  184.155548][ T9770]  driver_probe_device+0x4a/0x140
[  184.157720][ T9770]  __device_attach_driver+0x1df/0x320
[  184.160066][ T9770]  ? __pfx___device_attach_driver+0x10/0x10
[  184.162588][ T9770]  bus_for_each_drv+0x159/0x1e0
[  184.164671][ T9770]  ? __pfx_bus_for_each_drv+0x10/0x10
[  184.166979][ T9770]  ? lockdep_hardirqs_on+0x7d/0x110
[  184.169177][ T9770]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  184.171601][ T9770]  __device_attach+0x1e4/0x4c0
[  184.173579][ T9770]  ? __pfx___device_attach+0x10/0x10
[  184.175796][ T9770]  ? do_raw_spin_unlock+0x145/0x1e0
[  184.177959][ T9770]  device_initial_probe+0xaf/0xf0
[  184.180047][ T9770]  __bus_probe_device+0x60/0x160
[  184.182105][ T9770]  device_add+0x121d/0x1970
[  184.183986][ T9770]  ? __pfx_device_add+0x10/0x10
[  184.185957][ T9770]  ? __pfx___might_resched+0x10/0x10
[  184.188158][ T9770]  ? lockdep_init_map_type+0x5c/0x250
[  184.190293][ T9770]  ? vp_synchronize_vectors+0x121/0x1f0
[  184.192577][ T9770]  ? __pfx_vp_set_status+0x10/0x10
[  184.194676][ T9770]  register_virtio_device+0x661/0x7c0
[  184.196873][ T9770]  ? __pfx_register_virtio_device+0x10/0x10
[  184.199272][ T9770]  ? __pfx_pcibios_set_master+0x10/0x10
[  184.201487][ T9770]  ? __raw_spin_lock_init+0x3a/0x110
[  184.203688][ T9770]  ? __pfx_virtio_pci_probe+0x10/0x10
[  184.205911][ T9770]  virtio_pci_probe+0x255/0x410
[  184.207840][ T9770]  local_pci_probe+0xdd/0x1b0
[  184.209848][ T9770]  pci_call_probe+0x176/0x800
[  184.211805][ T9770]  ? pci_match_device+0x147/0x7d0
[  184.213852][ T9770]  ? __pfx_pci_call_probe+0x10/0x10
[  184.216032][ T9770]  ? __pfx_pci_match_device+0x10/0x10
[  184.217804][ T9770]  ? pci_find_host_bridge+0x3c/0x80
[  184.219454][ T9770]  pci_device_probe+0x25b/0x400
[  184.220903][ T9770]  ? __pfx_pci_device_probe+0x10/0x10
[  184.222628][ T9770]  ? sysfs_create_link+0x68/0xc0
[  184.224255][ T9770]  ? __pfx_pci_device_probe+0x10/0x10
[  184.226007][ T9770]  really_probe+0x241/0xa60
[  184.227517][ T9770]  __driver_probe_device+0x210/0x460
[  184.229260][ T9770]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  184.231216][ T9770]  driver_probe_device+0x4a/0x140
[  184.232866][ T9770]  __device_attach_driver+0x1df/0x320
[  184.235216][ T9770]  ? __pfx___device_attach_driver+0x10/0x10
[  184.237355][ T9770]  bus_for_each_drv+0x159/0x1e0
[  184.239009][ T9770]  ? __pfx_bus_for_each_drv+0x10/0x10
[  184.240756][ T9770]  ? lockdep_hardirqs_on+0x7d/0x110
[  184.242451][ T9770]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  184.244393][ T9770]  __device_attach+0x1e4/0x4c0
[  184.245947][ T9770]  ? __pfx___device_attach+0x10/0x10
[  184.247621][ T9770]  ? do_raw_spin_unlock+0x145/0x1e0
[  184.249372][ T9770]  device_initial_probe+0xaf/0xf0
[  184.251347][ T9770]  pci_bus_add_device+0xc5/0x100
[  184.253327][ T9770]  pci_bus_add_devices+0x9a/0x1f0
[  184.255500][ T9770]  pci_rescan_bus+0x2a/0x40
[  184.257446][ T9770]  rescan_store+0xfb/0x130
[  184.259400][ T9770]  ? __pfx_rescan_store+0x10/0x10
[  184.261550][ T9770]  ? sysfs_file_kobj+0xe4/0x290
[  184.263689][ T9770]  ? __pfx_rescan_store+0x10/0x10
[  184.265837][ T9770]  bus_attr_store+0x74/0xb0
[  184.267774][ T9770]  ? __pfx_bus_attr_store+0x10/0x10
[  184.270048][ T9770]  sysfs_kf_write+0xf2/0x150
[  184.272074][ T9770]  kernfs_fop_write_iter+0x3e0/0x5f0
[  184.274334][ T9770]  ? __pfx_sysfs_kf_write+0x10/0x10
[  184.276571][ T9770]  vfs_write+0x6af/0x1050
[  184.278366][ T9770]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  184.280759][ T9770]  ? __pfx_vfs_write+0x10/0x10
[  184.282720][ T9770]  ? find_held_lock+0x2b/0x80
[  184.284673][ T9770]  ksys_write+0x12a/0x250
[  184.286458][ T9770]  ? __pfx_ksys_write+0x10/0x10
[  184.288535][ T9770]  do_syscall_64+0x123/0x790
[  184.290545][ T9770]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.293032][ T9770] RIP: 0033:0x7f6f9819f559
[  184.294903][ T9770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  184.302998][ T9770] RSP: 002b:00007f6f990f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  184.306557][ T9770] RAX: ffffffffffffffda RBX: 00007f6f98426090 RCX: 00007f6f9819f559
[  184.309948][ T9770] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000009
[  184.313420][ T9770] RBP: 00007f6f98236b20 R08: 0000000000000000 R09: 0000000000000000
[  184.316791][ T9770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.320002][ T9770] R13: 00007f6f98426128 R14: 00007f6f98426090 R15: 00007ffe136268f8
[  184.323232][ T9770]  </TASK>
[  184.325189][ T9770] Kernel Offset: disabled
[  184.326966][ T9770] Rebooting in 86400 seconds..