last executing test programs:

10.990683765s ago: executing program 3 (id=281):
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a0c7, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x10)
syz_mount_image$fuse(0x0, &(0x7f0000000380)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)
socket(0xa, 0x3, 0xff)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file2\x00', 0x0, 0x92)

10.9506366s ago: executing program 3 (id=284):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0xfd5d)
write$FUSE_INIT(r0, &(0x7f0000002240)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000022c0)='./file0\x00', 0x0, 0x2c)
syz_fuse_handle_req(r0, &(0x7f0000002300)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000004300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000043c0)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f000000afc0)='./file0\x00', 0x0, 0x800)
syz_fuse_handle_req(r0, &(0x7f0000008800)="087f4f70c2f503ee63fac929bf6d532ea4fef0b993cbb820c0c7f946997a189bc22becf0e7270ac845a3280d8118f83315d563f447691a83a3a20e61006ea5f5a27bc023b908f3c22666cbe84a90ff0a09344587419ad5f4ffbd7d5f6150a4293cc9fe78787e6ec11a960d8d7a2bd8c8b7d95e8ff742a83f8915d5717b8d241dab292cb497f35c299846cbbb243c653431d71232f7f1980c6c9f63ee77b5e3adb4057ea7ebfbcada9f50bc8a5a0c165d322ce35172da0a7efa8e4f9e47d39fb5714e6875cbaa3d55f02b294dcd006156a2e621f521b8dfe414734a4d60c9638b34eab85b375cfab88dcc2f38f1d63d5c72bfbe29cfb8079c99b6a4551a1fcbb7e02f55018b68d0314ae14a6848e2a3be814f5ea25584144c5f76dc5d9ca6443a826279703be8770224dfce6be0563d67f7a41d5e831fe33f5186d9feb813bab7060d07bf9162af64f389b6985da4651ea56f5a140e261d0858f7546c1bd7f4217697c1ec0ea53aca8d6b7dc785dcccdc411dbc75d94643ee06df5a9c7164565be0705a836f564f01ac2137e79655c3f8545bf25d00eb75db31d6b1c27437a67b63c3d978c71209c5d0dff802691fd9e0f2294e21ca9be693348a6f4248f37dfc8d571ac39c0ea9485ff93009f022db728a787218cd2989ec0466fad16d2afc1c944692bb926bb7c9229d65c185b5e19fe51f100c1e6626594223f9c381563f44a7588cb2168a4318ff6cf1de77cf450016b573fc49efd365d87179b5cff4b9a590fcb75cb537649b93e8752e9d61a4c5841a1990e51486990224b93c4859e4d9db3d65a71a558c0360ad2a63208b05d224018929cbe6de524635a7737184ab6e9df4df1c0a12158003212113d96e05991f665154b7c7c6fb9286b116429e778f082d0ea39de30f88922fecdbb56a986b304465a1ed8ad9f2a4ba8238553b4a6674157fac65f3ae9c42fcbffc527442afb0a84a1b139d0608834d3e5a530e4916a9f1a2c6a0395d002a4118e96e20bc35d6ebe61105454e325d356bac97143f869bb72d090c29532133d0211f0dd25f2df4a6788aad2a772469868bdc77686396a563c7fb07e941c6aaffae53cf97b371708aa9fe8d21093da74f0a38b11785b64f7f2b3ea78744c49001be46b6304b5c8bb2f1d815951c790ede36d6f801edd9b03d7550ece0cd1466325caa1386b557989966355f22f226ba04024583eb43e6027a0315919c182834909df05614432dbefc9735a11e5e75f6df7fbdb91ea887fb98d78c3d2fc9eada60f2916d80066e33268c91c38023610f6b2ea5ef70219e793703f6049cefcd7b5a53dfddbb5af0d5ce2a8ed383fc06939668dad34795b847719559c04d6794730115c43620ea8a3366667b0ce32864e084de8a4ec57b9ca5306f56685546fa53951c02015a0d94e28e142df5820584f8e4929556b44ec2f1cd1f409db6f048036289f5fc514956c0f3859297ee7d76501942f6474d9341c98b4e460d36696837d858fb5a8d890f2ec298f8673174482a8bd22c71b34cdfa21e6d8444cc5f3f1674a0bb8bd9a1d2f8c14994b7133a0f3760f5de0052ca5daf254c7cc0a23af192ace27a14c8ec599b75764d046401f09aad466ce50fb9d32a75584d6c06b9f25e6c0d1d1f5ee42da11429bda0c4c9cc0f949d3bea5159e1ac98cda7e74f84830e39ce4e31f44346a00260cfdde2ef350223cec4648829f8e5b5eb34a0e803ff27b4a94248d8e0b51f99c64c208648f91b25175762aeaff3b7420a035f1c6cba93cd6094f4e630ace00ad25ce04248ebb5d5ce723d4cc082a9613b7a21a31e4780b7e0e50a9864fe6b3be832dda4be749541bcdc034567f34763b925cbf4efa7b76902b0170382692caf9c548b5b68c79da284ef109a1325c65ccca422bb53a7194baae0ffd0e140861ba91bafbcf0c8c6a2501824ee6f4635c0bc517df8d9e40ee6b4c575b4c43be85924d99ec9dfe1409de49491997f3cd9c6b31ed4492892f159f4fc9c306c45861c4e6de2887fc8d19443061e0c38956a1765169d6dd830fe6c3eb0c1a0a9f27a12ce2dc9d9753e88117e513a74da45c0a318f26cf50b23c59f1324d9a7b6e8f47cea8c52ff5dfadfa7716360f160dc4ef625047bea7123590db684d7681de21943d3cd83827d7c25c2724f041685a9e3e401d7f9d00fc44508b5ab2d983d9651d3f00ffd1ea9b2dde991b32ca051ab700095a97f45383275aa06f3fdeecf9b59addfc509f458cf2c96f3517593a0289a9c0605a9d255bb5dbaa4864a1d2ef5b4db89c126273f4b8babe101944d93d20da55c47d19f04f32a4f974c6a6d442f39bb52533ffb6e2afd50dcfc1209f58dc6369f310f083216b999983f221ba8aefe71bf1b4f4892531dc48565b0e9100e64f4a0923942c8963c7150cedfbfdf3156b3ab1c29d87d1090f44a3f028cfe5817c68f8ed003ca08ea6b8b931a26ce76bb37f01d576de5a5d10b0cf834927be15d4cca56920cf2bb67edc490c2451e02f177b3c6c845b780b7f648a1d6314ac97be7ebba1d08068bb5f410a443475c25ac44b4debae80512e714cd19345790224b3c0890f7011ed166862cda8c0d557044374db62fc83e54578d0268a2ace186de63b03ee175aeec9c8c2be737a63f81336df9e747f1bd0b912c2ce2d30ba0d857ef56ab64456ec0026b90eb99f84cfe0ef6d73aeb90149a35e72c9a91d2608c93f2e01e472fa326930001f4009572223d638a2b8d78cfd0b93e89a8da35406f0aca16e1d6a2efab9ec7a484369129962a0e0f4f4f290b8e388c8a74bd4f0514f11204291502bc8bf645b9bff3c7c7e6b13ba02d58b0e50ba5cf001d2c9962a73d6f55c56680ffd7fec508a929a0d801fdacbaaddf12d4c350aaf3e29dfada8819568d5134a075b5edf6a70a428023c5dc4a15b49393478e9d34454a181e8d1dc9c53720d3c60ccbb1fb39a6c0eb40849f35c95b9055fcfd78d8e98dcbede9a3666a3bc9a0a1ec98610e12dad1c08ffbcab13134c15ef1d4ae0fdc2ffebc5023653544f2b756b5031347d75a7a10a1f1ac47fe54c90ef74baa941fbd8ceaa4bcfea39f577f23c289453bdb2988616eba3972b8e912a0fecfbd87517787a0be0dbe436833fde3342d8a5ec4d3c6092bf44b948b3d0816ee7b567fc839d1c963373b8655e0ef531d35decfd9f4e2027f3fd044664424842dbadbd342ccc9e9548e1c516daf358ac79fa53d0f2238d5476119fc8ba50ef8d31d9b832ab99339af3df59e3ff3efa8a81135a079d3a27c2b303cc573b729b1b105a93735aa9740d93b8c6bd9e5b85e9b31f929c76071e7954954bae28e8eb96bddd6bef36d393bcc9dd1698c5b67821064eb3c69abd2eaefda1b1a30030e5721a38faaafe80b1b890ae3b56c4f3cc7eaa7c8beb31f775ae2fd681a13ffdbbc689c18e1600cb20b33ec2eb4d8f655e7df5dd1d66eaccae15be9f34b59cf20bd781a1647a47dd66ae84c1deab0995fc18c9a5ce86f881dc722f17ab72baf25bbeec559b74197df66e183e4a13ff08277d6f0e7e76b62311ec7712d13c0407103ed521d0b6a6bc6438e1231b063ae73c7abc0baddc742613b0b92f1a67cfb28055a80dd2ee6ea587944522b2fdd6247fea471e53f08604abccfda4b04ed8e1dfa36e09ebf143722a7911d4340ef88bae63ca74b63f729715e278b762c9931959e6a4101f946f4fad48ed2b8a980480e8d906aa2df681d0e123dca4a8b166c6e3c45600fde1f06a6ac730931a96c65a4830d0f9936b5f2682fe06555f86a00e2835588dc0e09cc3e0577abc29f3ae7c5e7871a97518721f7f290d222f710684b52e55836bb643a99b485c2542f14fa700c56d9282822753d6566b3fe4f1e72f851953aaa38186d456eea8826bfaae206dabe020c3111bca780588ecbe3f508fe79c2818506a5f84dd6dbc615cd6a4064348d328ef834f3cc34fdc884e999764e719768470b544ee31f49cad659da7ade5c32e5dfa102acf3836d90e6b76ce6783679fbf1ae78d92aaef40b61a0e5dde13a3015b077b3f63aa2e66162a985130ce7a0187a8d2fc012c6ed44dce4dccebc5c3d0f7e111c7fca4135a8ce434f8e41e1ab2ceecd98fb56bd4f3268897f0514164d7b0188b2c182d2ddafcfa46096165589b746cfe04c33416a6dd12edd225f7eb54fb1a46e7ab3d34ecc66a42dc8a131c55ed98bbec15dc490613baf5377eb5cb6d0959f673624888fa1dc8532225292afe584d8112e91c77049696a9e5b39e3f95ef95d5890c8286b52a23abe859f6f77d6e36d3dc4c7da6d8642a3da4bf0ded79457f3b270daa8c0ce116e9c8bfedc4ea47a32750b5db5811bb23583f937db0cf351b69472150511c3820108ff35cd228c9c2038e113d407523125a8ee5d4f2760e25d10aaf8f220221e22e056e0ce8d4d201ae37a39c9b41811c558f8dbb7a75af542cf90fc1d58deea58df04d416dd1b3d65fb74f80f9461d7aca6978ce553906cf62ee3b826979a3656179c004bf6eb3a15c0d56914ef20f0be2d1a7c53fdd41a3ef851ab5acde1996a5f72c0c9c0b748f799684f42a60776e6ed3c56329b673e41a9cdd39a8edaed511bc1b430bdc5afb5a50de39792c04a49ead7a660a1491b39ca7a5d722dc541d36b81df8e6bd56c032a979540d32ef2dd22836d268a0f286b8e34b657ac8f7d520c259dd5370d50bb2d4b245f6b14fd26690c9754b677cd9ca8b370c4687f6ad1a77b4acd16b62c6a24dae0008d38832ce30fdaf3d02fbdaedce0616b62d235272ea76820d0ac6788555e81d3b835ef8962458a6e011c45550db0af37923901ab3ba76a7320ef664991b3b045e82e37c5d3be6007fbbcbd3f11eef7669f7a1944931ecd06e1443ee4d05891ac32f93a1c33f9d73060a663ee0cfb77507551ca75d23a021c6b78624aff0a17989ea9c575381bcffed83fc8657763aa84ea744ac5742f1d015e8a35d73cff8a22ccf7646c5730d702abbe4e617628dfc0476165abdf002d2f17e819fc86febcc7dffef31ff5cb0095dd1c7adb7ddd6ae40c3ad31fa5c4b43385639be62cebf947b9e83ed0caf78254a5cdadb7f252d4b30148993049bb9f473a3a4fdeca3a7ae00dd1ea092ce05f432b101484faec024c53307241b2837e52cab39cfa72a4bbcff2a5750f721e8640b5289f1af82f0741a2caa48b156021d9127b4ebb606b653052446f85a47382766671a6fbbba7b9c1096a3040c5088b839398ddf62125c3feb8d0a0c132f06ef467c4a24f8fc84ab1ce511b1b7314c8647d80c1466946c52b688717236eaef1a97661bb32dbfb2870768902a47a0d32ac1a16a4c4d96f723fe5c121f15c01157091ca8163baf52622bd034d7c09577bceeee6d40f36e03ccfe1381f92c65b542b043226114d315889a979685392b694c04c26141344cd1f11eb8220c05cfcf6509ac3a544b4ff858722a63a5a927f28401a548252c5d6ea67744b918307ef1b409156741a5927aca7a64fa4558a0c6fca1998133e1b902cd67a450d95c520a90961f21e2b2f29fb685f70f8813510f4bd4d05e4cd651c8f7256a0f00d98acb5d750df17f76fd02fcdafbd161600ee40992d93dccad59ca746f98c971450a0fc5bb25046bad7839126d1edf7ce689b113fa0ce4cf7ad119c03e7bedb7d60fd82c980c3d5cef6187d57656a3252cad8211299ddab4ce58b41109fae4fd562db142e69d756b6b2d1d511b9ff05b40f2907f6b5d0af52bb4ca1591bf71f8175e088db7551d5e10aad30b221acaef2ccc877bfa3667c251b65caf7336eefa16f61b56dff158c8c76ef510a86364895f079fd55dbcf9ae2443e22527f8613918a6a81d4fe68b6f87ba59631c8daf77084351e3328aa52fa1815ef8ca6996f9a208aa14de79373911c867539104d65b25979532f6dfcd94b162870b4509e40c279b764998afbbdd61f3ad090baefd039c837f4ef12a0bee231eab13d9e9ac643f760326ba94217d6b7d8e8fa776ccd4a97cef2c60f4e4bb95e925283cc46fd6aedefdbc66740e84427b5523ecd8b4af0de81d79445cf7f35395c49d09bd4efd7c54d4f888440d867f39e4d4a7acfee14ddee5ea7c647ce77db76d08de25ac038a57e1e6fba571f3f1b06fe70aa371393953d45055c36983e27cfd9993938cf1ca0be72ee215e99582144d64181351369aea10ecf83a3da65fbe82e37cba727a49605ea8f205c3355d76a61df55cd021ce905386fbad378ecd9b8757869e86cbdccd86023654fbba02c719f99050eed0150b54bee74fba7b85e3c9760bb310ec1ae50caeef312418d4a9cb0925a8af8d342a1f77eee0c4d82ac09a245dc4c73d829e478854586bb170ade92578c42ef504f672a4c03bc813367e3ae623f8402926a41d853b92d7a7ae25afab1f3c4c8327ae1ac29cb4b0d4e61b728a8debe98e29d935928745dc6ee066829f98db2ebf0c606e67c1b600bad039ae547d612e33eb4d94a10f80d02a5fa6c9da17bd92829d4b6bdbe3d064fcd50b709e52f85b573901707c6c932048f57a5273e046b8b9af4c1d00bcbccab7ee4625475efd00a7544c2d078a6d95a8d36d1fae836d15c37ce9efba05fcfaeefa179c37dd7754e78fd71e1aec18fb4829a0a6a962418da398544980489e274d706f768d207f4af5c6305224b0400871ea8af461e9704c6ff3baca5a5be8ef585cc6def2f196e1c823dc375f6e7a405c927433b6a1fd3bdf70d4817a02f9881d42dfa6a38f1fbdc10dbf1b512df774e9dbadc1dbfb0a4375c0cbe704550937990a3530e4a4f348741eade7b372488222d893247e398aef8611a91836bc9323ff8d8b7a5c79353f5e350f87190bf3337c286eb955cb3a45c7a0da6a0595f44c660374cf069e778431618af7c24ff254b7682a3f5d771797693f568ac4d9548683eeba075c313f44351e74349554ca3349e1d31accf44dee5e864a26a96c074503503065fdc42f70a01b5ec0db6f77f0fc9f59fea6eb4ea08e3b642773ee45acedc5274a3a3cff4347af7f832b963223a961bdc38e9081a5e5dfd72d4a6efde668306d6e712c5bea85d04263bc602f1e3cdf02e4c44fc1b8b0688753330ca5f91df819cbca5538c9189d06d6b7df0eb38ae45cd936f46defd2dc626e0290e8730acda523dd9f0bf66e6add7ad63589121c32d53e569d54707c9e3e25d6944720bcf362b77242f0b8721469216c8f2844949d66a0e320a83a4444a7b44754d40669ea6344ed5e1b637c7bbe6fa5a87d9bfa8bb31fee32db0aabef8c5d947700d74ac2dab4cd395095c13274e9020aa5c366ea6159a0375fee40958cec064b557513739037882e1271d9ac2afb363a4c21a4ba1a0a8dbb66b20deb773ab4bbc464c5f80ff8519f4695d99fbbd094171e9ea258279b2a80f5b8e293cc804fd860ea11ef8705127ba1290a220ceeb7b7f496b9c5501bf1de321f577fb00c69b95b1e08546b3ab24ba4b9388786a23f4c07fe12ce9ec33e1bd2ec516cd6872f55f65c33ea5ae9f9a64f63a6133e872e42a95a5d85c2070d4ddb6bea192527d6bf24e16ed311c83ffd7f2ca448d59d9440e4a3c3313729697f7ec0395695d3246607458774340a2ff2ee7947f35008d24ed9bde207bc3f3ff79181243852b2b4aed006a62fcc97c4d17b5f2959c73fdfed0933afddf758ee4828d6b76a4aaba5952e9540f264cdc2d566ae13501c95e7f97ed19d723ce5f2c273ea12b41630912a76a23519891099053fa81398e3397ab7108bdcf0376d6f6926afd5302a80a9f89d927d6c5f83dc69c52ad756d851e50a1baacbf50a44096059ffbf4458a65abf0d07e6fa3b5dd0114ed23ab6409b7bd1aa57bd6243022600ec32f49cbefa9084f8e5c34a08d9003d5f1a8bd0f0022d5179afbdf1bdd98a7b5c25338d3088e61c39019acae433235938613c3c8ce197f5dd51b061b7e61801a62f853bac089a3a3a029bdd0cf17e9248876d303d4da233299229e44d6b0e9dd2b145aa6162a9bac1d47b872b89ce4bee0ffbf1a338f84dc0fc497b5e13252951f7fd577f9dd4170db6371285799bdf00aaeb108bb72acde9c332b7a347fe6b1fbae2cb0463fabbffe8bbf0c71a341e35e055d113bbd90eb6613de8396753740feb879ff677b08b8e5b4eb7a4f496c00ef7e24a293c8b5fbc048ceeb60fbb2c4815c05442dead3a7f3f2e5c2c82721bd2339bda4f8ee096d0a1b200f4b90936d35ccda1e105473046705fcd6aa4a16ca6c5d2a07d4311af239b3deae5335a05e641ae48613fea9e3b9b9f34f6d0552ba45657406be840eaa2e2d6fad6e60165788fd0fc38e6aae303e5b62bac7a21ccbaeeb70bedeb5492285cd13aa03b1d417ea9f443c75ca3a88f5d8c84ce37114df178c484318fa543151f5a3d9e28d799a7d829212989e82d2f2fcf6b439e00a4460640c2e503eec8cac0e76e3bfee91aaf49f180f3b02d3203613776b1c34adce457be42c3e6b2d479e1f078300711d5af5a18b893d86ab9155c90fa700e38ded329355edfc654b9cf2e394610833ccf96b6523ce5ced1b9f50cf6e1bc78e521ca6b65dcfa2ac82c0c0ca15b422f54e5f5f4e7a21ad0a9673915cb4b219dce48dee6e5a0eb6bbc57cc2360872ada0dd81c7bf5fd21273baf3190f79d6eb19d2f30cd9876aa4639f64907809988f030bf2b63aaaff6b6974df289dd1248a6f75047a3462187a4c8454ac148093dc27b0dffaf8b66067e704d87fba6da03a0686c5c0a7ae445e4ae2d483d4f3a5e58b26d7334f6050d27abde54bfda4e60c1820ffae404a602b17fb57eef9187416b9fb6d3db31fccb7f4e18db66ade46faa8121920c8a2edea5e346c43d4574e1b0612d9e39f21fa57da174a8e5791c01fe42ffd59b5bcbe18c162ba56ed7ff1da5279ac6c080b4eca3dd626ff640bebfac624d6a81d6ede4109cbb7d27b49a39aae3f4dcbd367a40f4e6c804c80d7875763d8ac65bc60b6df3ef6fd876fdf4a27511ce245686dc189bf73aa30adb157bc19a0ccffeb61f29bc76f7b3be8fbd9d29ede534f111db554780a9356763ad2bfb1c12e2b74dea3ed74d77ffb48ad1db51eddaad05553726cee50eb59a8eb2addf3f21d3d25008a9181d93e8b5d68c1d6da65eae0a52ec242082d9b8d762461ab37466b3ca7561ed4e024ec13baaa12472270a9fdbd04d8cbda483ab350b3df173285aa58ad71fe810116665ac915e2f7cec0fcb9640417b724e629450b213bbf30e52a662be23af5ab0c68403230744d997fad80ebc8555c9a9455b74da2b8d2e596d91178365b8db7ca82357648cada8c701875c12daae1142a02ca4ae766d7487c85c8b0ffa50f3c950b9f5403d7f875bdce4ef0459d3c8ad04cc69617e02eb43f4f769a556927d45b668dc50eb98b88130c3122babedfb666bf4baa03c26724ba8409ace1c062d639cb5e6c2a5cc70e11207da6958bae83e868dcaffbc7f999abcb192a630a2d326a1222611a98caba74b9dc9cf812fd4c75f34d043454daa9cd71c4680fd325e26cbd14960eb464b62afca5e6a6c18849c04c8ae4df3582bd26eade60d67f24502ff44f33e39007c71280a20f0ed9e585d99520c86a4fe97e9481a468a9636299f96afe38b106c6e507187ac67cb4b4b3915765e5193c8d6e992dedca4cf46c58f2824ed0c1b872ce53d48d3045ee4f6e4480ed13bd4273eda691e018ae170915816dd72198036cea216025eaaa578026872362311423bb287316840baf5e5f9f45263a4588f232a761ac5781e920a7fdfb5bcb99b00980af5ebc2aa001fbc7ab6d393b944d9e71a77286577051f00fce57864c35f382c0a0bb76dcdd5c74c9a4806fd8bcf92219167cf13487ececc9a1dd9bc0d3b9d6b26b8673a53e8f93da6cc7b1db49de06f3b8fc1c83e21d644c3075c3334e69ce6625e55570848a943560c9bb95380194535f67f74031d2436e753c889d3a5dc083f9e44fa5a299a05bbfc365f38989402a4e697526d32aeb6b8f3586e023995c3e0d5143c0d0e55195d99fa41210f8605ffd1797ebf1a217cfb593a5d202b0d8ebf778ac82fe2fc6f066d59e4902f5b51134ea5ff5e52f663cf03fc679f85d57345215888b0825a0028c8ec75692a662bc3ad5f3024c600cf9f4f4fd74dcfd5ad8c98073248edd76d7718030d213648a95f0c8d47e584ae20ff2ad388323fb25e6ee2c3a365716602ca4daf7da4f0decf77d6f0a67217b99ff99f14606ef9c27d75865f28c8af113c125076a60cf8d445fc677b8965ffc6f4a412c125bdf0b462aae3d05c964a37f3b85fcd42f5eab30dc774562fc050f38171dc9a56a90fffa2eff2b8121a33bff75d8885eeab7d2277af7b3c1ec9eb597ecd0b2116a27de63eaf7c02edd36a750ced84d491defd7fe136809f72a66916e9a55252a89f2467b1d86e8f5f7c171c767feaae2d8b693b7a0fe781bbb90d8154cc9fcf666b352de34a6b58fc79e489100355a3eff2aff233d3b6b8f4f07bcda5394e4f4ad6fcf33d15568c3bd4e41cd65eb7643cd359570282b9d0da46a7c2de51cf26e449055d8773b82a8ec2d6f53f89160845a1b27680f084e5225e1ae9786b3c83c28ef72c8146a94f3161680da3844c02b8c8ee2cecf3904bd7476ab9811bd81d20411d80df4bd82a258975bc41ab77b68a7a87d7dee9d3494761a55b24e920b480922e06bd198ee22405879d9dc988da16164b31910aaf160080e9005a152744831a38e8593016b59ff7c319003b4818d5a482dd11ce6144311fb9bf380449b819886bd3d24f8be7a7bb4fbc7cf6311bb628a879adb857d2827c904df3ca487471c367616b1854d1dbe543133d4102fef80eff47c2d9e1bdc62f28ab42135bc3a6198873d318e7f2b60345852b3f339f705a5d02e31e8ec53b560661082f89149457d0e8068a1d71f0cd3316d93baba3b703945670c619b778d1b93ac433757d97cb7735bbb2490da5a4a81b124157b1ecfce522f03ea5d9640762279ce2c4234078ae9ba984fac294b52ed830a91ed53e5699b6efebc9100faa37a6bb6c7f0fe8ba3cd636c1ad86aec8d7b8157288ae698160fd7e940a25644bbf27972cedf9391fd8c8b71769d7eebf922512aa8bdd517bfe8ed4b0ab901b9fceb7bd130c7dc6c668e587f59ecdea8b47bd7797c18cadf43b79ab5695bba7f8bed12e498087b4c6285b59a07079fcb62c979b8c50271ffef5ef10e65463abc73ec1e03862299175e53de74edccf9130942598c6f7eda2a38979aa63a86aa92f1a3f3a8d91dc2ea4b21eeb419dee3152627ce0e2dda6affd835af7fe0bc93b0e5e87d3790b121efc3187a0ec2f06316d6ad93e29d7556047cdbb09726b4dfe21725d546090a298e9e0223846cad1be5814487654570106a9dfa11e6355d5193c87fd39ffcff31e33b4113aa80647d2d6af772fc164b4a1ab20bdd6bbb6dfd4c9b2502351f65b2d60adf23427e34b86cc4952abe32f96b2173cc5bc4763312f59692330eab7bc1e6f0ccdcabcdac129914c005334c996f85eae47cf5b4ee63f9fd67ca6a85c422edbfaf8832a38c9b13f964caab71396ae0ff7b965f8b670fad5c676acc2c0d34158e74f1f27abe46b6", 0x2000, &(0x7f000000b2c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000acc0)={0x78, 0x0, 0x8, {0x6, 0x7, 0x0, {0x4, 0x3, 0x9, 0x100000001, 0xfffffffffffffff9, 0xb088, 0x2082, 0x4, 0x8, 0x8000, 0x2, r2, r3, 0x10001, 0x10000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(r4, 0x0, 0x0)

10.05746593s ago: executing program 3 (id=298):
r0 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r1, 0x0, 0x0)
fchdir(r3)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20)

10.05732593s ago: executing program 3 (id=299):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000080)=ANY=[], 0x1, 0x1520, &(0x7f00000006c0)="$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")
chdir(&(0x7f0000001c00)='./file0\x00')
creat(&(0x7f0000001c40)='./bus\x00', 0x182)
mount(&(0x7f0000001c80)=@loop={'/dev/loop', 0x0}, &(0x7f0000001cc0)='./bus\x00', 0x0, 0x1084, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001d00)='./bus\x00', 0x8840, 0xa2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001d40)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000001d80)="d4", 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
openat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0\x00', 0x2c41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)

9.85676207s ago: executing program 3 (id=301):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1740, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r6, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[@rdmsr={0x66, 0x18, {0x40000099}}], 0x18})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000100)={0xc7, 0x0, 0x1})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

9.74807927s ago: executing program 3 (id=304):
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000a87000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f00000009c0)="ba4200ec0f20dd66b9fc08000066b80040000066ba000000000f30660f38828e0080f00fb1bfef00650fa2d386f7ffbaf80c66b8c7e5c48166efbafc0cec362ef30f2dec363e0fc77a00", 0x4a}], 0x1, 0x38, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000480)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086e92ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9.708270795s ago: executing program 32 (id=304):
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000a87000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f00000009c0)="ba4200ec0f20dd66b9fc08000066b80040000066ba000000000f30660f38828e0080f00fb1bfef00650fa2d386f7ffbaf80c66b8c7e5c48166efbafc0cec362ef30f2dec363e0fc77a00", 0x4a}], 0x1, 0x38, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000480)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.824354265s ago: executing program 0 (id=391):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x6b}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)

4.785731449s ago: executing program 0 (id=392):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000f80)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffb}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x1, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0xacc7, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff7, 0x7ff, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x33, 0xe, 0x1, 0x66abcbd2, 0xea4, 0xc, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x9, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x0, 0x9, 0x3, 0x3, 0x4100009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x3ff, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x87e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x1, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c)
socket$nl_generic(0x10, 0x3, 0x10)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")

4.036331854s ago: executing program 4 (id=402):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001cc0), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001d00)=[@text64={0x40, &(0x7f0000001d40)="f26f66b837018ed86667660f72d40466b8d0008ed0f30fc776000f010066baf80cb824a91788ef66bafc0cb8668f0000efc4e1c1590f66f267446690f26643ec", 0x40}], 0x1, 0x52, &(0x7f0000001d80)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10085220000c}], 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000580)={{0x8000000, 0x3000, 0x8, 0x9, 0xfb, 0x8, 0x3e, 0x17, 0x0, 0xc8, 0x19}, {0xb000, 0x50000, 0xa, 0x0, 0x22, 0x5, 0x79, 0x6, 0x5, 0xb4, 0x3}, {0x0, 0xa000, 0x0, 0x5, 0x3, 0x3, 0x0, 0x19, 0x1, 0x5, 0x5, 0x81}, {0x3000, 0x1, 0x44e41e77284b2876, 0x1, 0x0, 0x42, 0xb, 0x0, 0x6, 0x7, 0xc}, {0x11f6593269eab9dc, 0x126000, 0xb, 0x3, 0x15, 0x19, 0xab, 0x7f, 0x7, 0x83, 0x8, 0x83}, {0x8000000, 0x0, 0xc, 0x4, 0xad, 0x8, 0x1, 0xf7, 0x8, 0x5, 0xff}, {0x3000, 0x2000, 0xc, 0x7, 0x8, 0x5, 0x9, 0xc, 0x5, 0x81, 0xff, 0x6d}, {0x100000, 0x2, 0xe, 0x5, 0xb, 0x7, 0x0, 0x34, 0x2, 0xb, 0x3, 0x9}, {0xa000, 0x30}, {0x100000, 0x7}, 0x80000031, 0x0, 0xeeef0000, 0x1200d, 0x3, 0x8000, 0x54000, [0x6800000000000000, 0x4, 0x61, 0xf]})

3.811168057s ago: executing program 4 (id=407):
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=<r2=>r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x40)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r4, r2, 0x15, 0x0, @val=@netkit={@void, @value, @void, @void, r3}}, 0x1c)
r5 = socket$inet(0x2, 0x1, 0x0)
getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x2f, 0x0, &(0x7f0000000580)=0x100000)

3.735275755s ago: executing program 2 (id=408):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x104)
io_setup(0x81, 0x0)
io_setup(0x80, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000006c0)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0)
pwrite64(r0, &(0x7f0000000700)='/', 0x1, 0x0)
ftruncate(0xffffffffffffffff, 0xc17a)
openat$null(0xffffffffffffff9c, 0x0, 0x301000, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001940))

3.67512218s ago: executing program 2 (id=409):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
exit(0xfffffffffffffffd)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000f80)={0x1, 0x0, 0x0, &(0x7f0000000fc0)='\x00'/65, 0x0, 0x2000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001040))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001080)={0x0, 0x0, 0x0, &(0x7f00000010c0)='\x00'/185, 0x0, 0x9000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001180)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0})

3.504162748s ago: executing program 4 (id=411):
r0 = gettid()
r1 = creat(&(0x7f0000000040)='./file1\x00', 0x12e)
close(r1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fc000fc}]})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0xc)
listen(r2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000012c0), 0x200000, &(0x7f0000001300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

2.818477367s ago: executing program 2 (id=421):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000340)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000380), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000100000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c000280050001000000000008000740000000001800068014000400ff010000000000000000000000000001"], 0xac}}, 0x0)

2.602764249s ago: executing program 0 (id=423):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000480)='ns\x00')
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0))
openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file2\x00', 0x143042, 0x80)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
eventfd(0xfffffff9)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x0, 0x1000, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9d3, 0x8000, 0x1000000, 0x35c, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x80, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd289, 0x80, 0x5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x1, 0xfffffffd}}], 0x1, &(0x7f0000001000)={0x2e, 0xa, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0xbcc, 0x0, 0x0}}, 0x0)

2.566817432s ago: executing program 4 (id=425):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000ec0)="170000000200020000ffbe8c5ee17688a20033000303000afdff0230040000d90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x204001, &(0x7f00000001c0), 0x1, 0xb9f, &(0x7f0000000200)="$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")
mkdirat(r1, &(0x7f0000000e80)='./file0\x00', 0x101)
r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000dc0), 0x1, 0x0)
write$binfmt_register(r2, &(0x7f0000000e00)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c)
mount(0x0, &(0x7f00000010c0)='.\x00', 0x0, 0x2b90020, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./file1\x00', 0x1c0)
unlinkat(0xffffffffffffff9c, &(0x7f0000001000)='./file1\x00', 0x200)
pivot_root(&(0x7f0000001040)='.\x00', &(0x7f0000001080)='.\x00')

2.466387132s ago: executing program 1 (id=427):
socket$igmp(0x2, 0x3, 0x2)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_ublk_setup_queues(r3, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

1.949166484s ago: executing program 2 (id=428):
r0 = memfd_create(0x0, 0xc)
ftruncate(r0, 0x103)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000)
read(r1, &(0x7f0000000240)=""/145, 0x91)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199)

1.6894005s ago: executing program 4 (id=429):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x75d, &(0x7f0000000140)={[{@oldalloc}, {@orlov}, {@discard}, {@errors_remount}, {@lazytime, 0x0}, {@sb={'sb', 0x3d, 0x8}}, {@noload}, {@journal_checksum}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@data_ordered}, {@journal_dev={'journal_dev', 0x3d, 0x769}}, {@norecovery}, {@bh}, {@dax_never}, {@errors_continue}], [], 0x2c}, 0xa, 0x526, &(0x7f00000003c0)="$eJzs3M9vFNcdAPDvrNcY13bt0p+UtrilVa1WBWwocOgBUCtxaVWpVUUvlVzbIIqhFXYlQJYwVQVSDolQ/gCS3CJxyjGn5BIlUQ6JuAblmCgSinzB4RBNNLszy3rX65+7tow/H8neNzNvZt535j3vvPd2HcCuNZz9SiL6I+Lj/ojB6uLSDMPVl8WFuYkvF+YmkkjTv3yRVPI9WZibKLIW+/XlCyOliNL/kzjQfNqemRs3L49PT09dy1ccmS3lqSvjF6cuTl0dO3Xq+LHekyfGftuWOPuKwu0/9/d7f5w4f++f7z3IVqX56vo4qoYqv/es+Qxdz5JvlCsvwzEcpRa5f7GOsu8EA3XppBy921gU1iGrtVlt7c7afwxGV5Rr2wbjD//b1sIBHZWmadrTtLb2Xjaf1kuS6g5pejsFngNJrJaj4a8A8Jwo3uifLGS94bmJ5n7w8+3xmaj0gLK4F/Of6pZype8+PFTtG3V36PzfiYjz80/vF89gu+36AwBb760zEXfPVp87ip/qllJ8ry7fN6M6NzQUEd+KiH0R8e38+eW7EZW834+IH9TtM1A5ykq6q/NPdZqffz4q5hLqH1fbJnv++10+t7X0+a9W8qGufGmgEn93cuHS9NTR/JqMRHdPtjzafOjasNrbv3/4UqvzD+fPf8VPdv7s9VmO0uflhgG6yfHZ8c3GXXh8u3JhbzXHn0Q5KVIR+yPihxs4fnbNLv3q9R+12r4k/izOpvhfbH3w8gYK1CB9NeKX1fs/Hw3xRz7/l1TmJ6/858jMjZu/uVQ/Pzl68sTYg5cjpqeOHilqRbP3P7zz5zzZ1I1Y4f4XTWPlJrRJ2f3/xrL1vzYLPJSlavO1M+s/x51Hd1v2aTZa//ckf62ki/nZ6+Ozs9dGI/Yk883rx57te328d0n+LP6RQ8u3/30RX72S73cgIrJK/OOI+ElEHMzL/tOI+FlEHFoh/nfP/vxfrbqQq8ffWVn8k+u6/60Spz+IWH5T1+V33mw68QvDTfF3x9P7i0ljxuz+H6+kRvI1k+Oze1eLa6WS1ic2cekAAABgxzgYEf2RlA7nA039USodPhzRVxtBmZn99YV///fqZPU7AkPRXSpGugbrxkNH87HhbDnba6xuOdt+rDJunKZp2pstZ/336YHtDR12vb4W7T/zWdd2lw7ouHXNozUN0AM7WWP7f7TmPdv/gQxga7XhczTADqX9w+615vbfqW/BAdtmufZ/K2JxG4oCbLHl2v/fmtac3pKyAFtL/x92r423fx8GgJ3O+z/sSmv6kvwGEvvOrZAnKXfmpK0TpagmPv1HNezG/wIwFFGsKZ5pVj7gJ6WI9pSwa/MBZiXO1/QuuaelZffaG+24qlFaNU95Hf+IoWWit03XeUmitPbMvXH5Tw87WkV7mitkY+2tVbZbReJmp5tMpRG8to1/mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANri6wAAAP//qXDF/w==")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x8, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000fc0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001340)=[@text32={0x20, &(0x7f0000001380)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000013c0)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.68915875s ago: executing program 4 (id=430):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r3=>0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}])

1.573156012s ago: executing program 33 (id=430):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r3=>0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}])

1.566196783s ago: executing program 5 (id=432):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x2, 0x4000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000022c0)=[@text32={0x20, 0x0}], 0x1, 0x15, &(0x7f0000002300)=[@cr4={0x1, 0x1403d5}], 0x1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
syz_emit_ethernet(0x0, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.541678745s ago: executing program 1 (id=433):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket(0xa, 0x3, 0xff)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000040)=0x7f, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x2c, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, {[@hopopts={0xff}]}}}}}, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000})

923.131527ms ago: executing program 2 (id=434):
syz_mount_image$fuse(0x0, 0x0, 0x20008, 0x0, 0xff, 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x5db)
unshare(0x22020600)
r1 = gettid()
timer_create(0x1, &(0x7f0000000280)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f00000002c0)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = syz_create_resource$binfmt(&(0x7f0000000340)='./file0\x00')
r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x41, 0x1ff)
fcntl$setlease(r4, 0x400, 0x1)
r5 = syz_create_resource$binfmt(&(0x7f0000000380)='./file0\x00')
execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0)

885.387391ms ago: executing program 0 (id=435):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)={0x30, 0x13, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x4, 0x14c}, @typed={0x8, 0x33, 0x0, 0x0, @uid}, @nested={0x14, 0x125, 0x0, 0x1, [@nested={0x8, 0x2e, 0x0, 0x1, [@typed={0x4, 0x92}]}, @nested={0x8, 0x13, 0x0, 0x1, [@nested={0x4, 0x10a}]}]}]}, 0x30}], 0x1, 0x0, 0x0, 0x48055}, 0x8880)
mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/available_tracers\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000740)={0x2020}, 0x2020)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000004c0), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000500), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth1_macvtap\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x78, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x1000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0xb3b0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10, 0x3}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

809.463089ms ago: executing program 0 (id=436):
socket$packet(0x11, 0x3, 0x300)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0xb27, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto(r0, &(0x7f0000000280)='P', 0x1, 0x4008044, 0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00', 0xffffff8c)

690.129281ms ago: executing program 1 (id=437):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)={0x10, 0x30, 0x800, 0x70bd25, 0x25dfdbfd}, 0x10}], 0x1, 0x0, 0x0, 0x804}, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000000c0)=0x80000001, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x7, 0x0, 0x184, 0x671, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x7, 0x29, 0x0, 0x2, 0x0, 0xbd9], 0xffff1001, 0x53101})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7f, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9, 0x2], 0xeeee8000, 0x102280})
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0x3, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x1, 0x5, 0x75, 0x6, 0x36, 0xe, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x5, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x4, 0x6, 0x2, 0x7f, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x87, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x18227000, 0xe, 0x5, 0x7, 0x5, 0x7, 0x43, 0x8, 0x81, 0x42, 0x70}, {0xdddd0000, 0xa000, 0xa, 0x5, 0xcd, 0x7, 0x9, 0x9, 0x2, 0xc, 0xb0, 0x91}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x1, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

433.459826ms ago: executing program 5 (id=438):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000880)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x80000, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000009c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0)

384.179541ms ago: executing program 1 (id=439):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
r2 = socket$key(0xf, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0x8000)
ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000180)=[0xa, 0xb])
sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xfffffffd, @private1={0xfc, 0x1, '\x00', 0x1}}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x2, 0x3, 0x0, 0xfffffffd, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private1}}]}, 0xa0}}, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="65fd00dc3985ceb7c4247c74195b86e5218301000000fdffffbf", @ANYRES32=0x0, @ANYBLOB="0c009900fbffffff50000000"], 0x30}, 0x1, 0x0, 0x0, 0x40804}, 0x4)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x600, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xc4, 0x4, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7a89}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9000}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x41}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x20000010)

352.421505ms ago: executing program 1 (id=440):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x42}, 0x94)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7, 0xc, 0x6, 0xfffffffffffffffd, 0x8, 0x6, 0x4, 0x2, 0x8, 0x4, 0x3, 0x1, 0x1932be21, 0x100000000, 0x4, 0x4], 0xeeee0000, 0x40600})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1})
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x9000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

327.411557ms ago: executing program 6 (id=431):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
exit(0xfffffffffffffffd)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000f80)={0x1, 0x0, 0x0, &(0x7f0000000fc0)='\x00'/65, 0x0, 0x2000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001040))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001080)={0x0, 0x0, 0x0, &(0x7f00000010c0)='\x00'/185, 0x0, 0x9000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001180)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0})

253.988855ms ago: executing program 5 (id=441):
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x20002041, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0)
bind$inet6(r0, &(0x7f0000000a40)={0xa, 0x4e22, 0x1, @loopback, 0x7}, 0x1c)
shutdown(r0, 0x2)
listen(r0, 0x7)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x24040004, &(0x7f0000000a80)={0xa, 0x4e22, 0x0, @empty, 0x7f}, 0x1c)
sendto(r1, &(0x7f0000000280)="1e1a02f8045f40dec1eee1eda0a1358fc61764f0678eb2354b1b5f7972d8d8a583060b008d5676a814b496b5598751acd495188d3526e054fe90539988262f1e704b8abc63bde08db4a416672c4e533d222305244d4aac7111d27ee1b9deceaa139d29f0db39a3b4cd0b5ebf7b135a836428cfa5da833a77e5311a09e0266c453e4386787e1bddd5597cc3b84f756da26ae6f00f05cf2e2ce3f7a2d3d6334a396d108048f7e060172e9e68b65a36543e78e60595211b1efa61aac3670ec5f932fa0c694911104878572000"/224, 0xffffffffffffffad, 0x0, 0x0, 0x0)

239.130096ms ago: executing program 5 (id=442):
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

194.65325ms ago: executing program 1 (id=443):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$tipc(0x1e, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000014c0)=0x2)
pivot_root(0x0, &(0x7f0000000140)='./file0\x00')

188.682651ms ago: executing program 5 (id=444):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000004000000010000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00803b000000000000000000000000000095d9c1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)

163.713064ms ago: executing program 5 (id=445):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000003100)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x8)
connect$inet(r1, &(0x7f0000003140)={0x2, 0x4e20, @loopback}, 0x10)
r2 = accept$inet(r0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x10, 0x6, &(0x7f00000032c0)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r3}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x5a}, @generic={0x95}], &(0x7f0000003300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003340)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000003380)={r3, &(0x7f00000033c0), &(0x7f0000003400)=@tcp=r2}, 0x20)
sendto(r2, &(0x7f0000003440)='a', 0x1, 0x11, 0x0, 0x0)

41.119656ms ago: executing program 2 (id=446):
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
rt_sigpending(0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000029c0)={0xaa, 0x428})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002a00)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000002a40)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})

0s ago: executing program 0 (id=447):
socket$inet6(0xa, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', <r1=>0x0})
socket(0x10, 0x803, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x9, &(0x7f00000003c0)=ANY=[@ANYBLOB="b7020000020000007b2ac0ff00000000632ac8ff00000000bfa200000000000007020000c0ffffffb703000040000000b704000000ff0000850000004500000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r2, r1, 0x25, 0x0, @val=@tracing={0x0, 0x2}}, 0x20)
creat(&(0x7f00000000c0)='./file0\x00', 0x108)
pipe2$9p(&(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
write$P9_RLERRORu(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="5300000007000046009d9aa623f2155c2ce6c30e8337c6d5", @ANYRES16=r3], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.152' (ED25519) to the list of known hosts.
[   24.425867][   T28] audit: type=1400 audit(1794286770.015:64): avc:  denied  { mounton } for  pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   24.429131][  T278] cgroup: Unknown subsys name 'net'
[   24.448544][   T28] audit: type=1400 audit(1794286770.015:65): avc:  denied  { mount } for  pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   24.475861][   T28] audit: type=1400 audit(1794286770.055:66): avc:  denied  { unmount } for  pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   24.476224][  T278] cgroup: Unknown subsys name 'devices'
[   24.619309][  T278] cgroup: Unknown subsys name 'hugetlb'
[   24.624928][  T278] cgroup: Unknown subsys name 'rlimit'
[   24.760348][   T28] audit: type=1400 audit(1794286770.355:67): avc:  denied  { setattr } for  pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   24.783665][   T28] audit: type=1400 audit(1794286770.355:68): avc:  denied  { mounton } for  pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   24.808555][   T28] audit: type=1400 audit(1794286770.355:69): avc:  denied  { mount } for  pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   24.832033][  T280] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   24.840830][   T28] audit: type=1400 audit(1794286770.445:70): avc:  denied  { relabelto } for  pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   24.866297][   T28] audit: type=1400 audit(1794286770.445:71): avc:  denied  { write } for  pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   24.892882][   T28] audit: type=1400 audit(1794286770.495:72): avc:  denied  { read } for  pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   24.918630][  T278] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   24.919204][   T28] audit: type=1400 audit(1794286770.495:73): avc:  denied  { open } for  pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   25.718710][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.725787][  T286] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.733321][  T286] device bridge_slave_0 entered promiscuous mode
[   25.741521][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.748636][  T286] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.756015][  T286] device bridge_slave_1 entered promiscuous mode
[   25.827611][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.834675][  T287] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.842210][  T287] device bridge_slave_0 entered promiscuous mode
[   25.865824][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.872954][  T287] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.880486][  T287] device bridge_slave_1 entered promiscuous mode
[   25.893716][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.900984][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.908447][  T288] device bridge_slave_0 entered promiscuous mode
[   25.928884][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.935934][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.943393][  T288] device bridge_slave_1 entered promiscuous mode
[   25.953302][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.960561][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.968065][  T289] device bridge_slave_0 entered promiscuous mode
[   25.983863][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.990970][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.998515][  T290] device bridge_slave_0 entered promiscuous mode
[   26.007996][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.015048][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.022630][  T289] device bridge_slave_1 entered promiscuous mode
[   26.035301][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.042767][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.050236][  T290] device bridge_slave_1 entered promiscuous mode
[   26.241945][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.249041][  T286] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.256329][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.263391][  T286] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.276474][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.283565][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.290885][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.297947][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.311683][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.318750][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.326013][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.333064][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.341354][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.348425][  T287] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.355723][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.362776][  T287] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.380049][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.387102][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.394461][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.401514][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.455819][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.463418][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.471188][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.478526][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.485764][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.493539][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.500785][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.508171][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.515396][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.522712][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.530765][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   26.538260][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   26.559666][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   26.568100][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   26.575581][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   26.583916][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.590982][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.598639][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   26.606795][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.613848][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.621481][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   26.629639][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.636673][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.644134][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   26.652331][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.659383][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.687467][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   26.695036][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   26.709134][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   26.718386][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.725430][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.732864][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   26.742760][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.749828][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.757305][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   26.765426][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.772488][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.779882][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   26.788168][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.795190][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.802650][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   26.810613][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   26.818659][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   26.826561][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   26.834773][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   26.856199][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   26.864361][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   26.872555][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   26.880790][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   26.889229][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   26.897698][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   26.905877][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.912941][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.920468][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   26.928822][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   26.936939][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.943998][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.969393][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   26.977657][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   26.985661][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   26.994278][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   27.002846][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   27.011123][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   27.019294][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   27.027439][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   27.035400][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   27.043730][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   27.051957][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   27.060424][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   27.070918][  T286] device veth0_vlan entered promiscuous mode
[   27.079534][  T289] device veth0_vlan entered promiscuous mode
[   27.094479][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   27.103102][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   27.111252][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   27.119503][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   27.127761][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   27.136020][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   27.144576][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   27.152226][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   27.159762][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   27.167454][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   27.176849][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   27.195857][  T286] device veth1_macvtap entered promiscuous mode
[   27.207979][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   27.216920][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   27.225484][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   27.234086][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   27.242140][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   27.250513][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   27.258589][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   27.266016][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   27.273696][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   27.281266][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   27.289882][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   27.298468][  T287] device veth0_vlan entered promiscuous mode
[   27.308011][  T288] device veth0_vlan entered promiscuous mode
[   27.315444][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   27.323691][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   27.331379][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   27.341702][  T289] device veth1_macvtap entered promiscuous mode
[   27.350991][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   27.359823][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   27.368556][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   27.376719][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   27.392982][  T290] device veth0_vlan entered promiscuous mode
[   27.401676][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   27.410110][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   27.418821][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   27.427035][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   27.445740][  T288] device veth1_macvtap entered promiscuous mode
[   27.457305][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   27.465569][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   27.475508][  T290] device veth1_macvtap entered promiscuous mode
[   27.490960][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   27.499130][  T286] request_module fs-gadgetfs succeeded, but still no fs?
[   27.500097][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   27.514630][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   27.524015][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   27.532528][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   27.546587][  T287] device veth1_macvtap entered promiscuous mode
[   27.561037][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   27.572483][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   27.581922][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   27.590391][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   27.602313][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   27.611220][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   27.639054][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   27.656601][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   27.950463][  T318] kernel write not supported for file bpf-prog (pid: 318 comm: kworker/1:3)
[   28.128608][  T378] ip_tables: iptables: counters copy to user failed while replacing table
[   28.152749][  T380] device macsec0 entered promiscuous mode
[   28.165013][  T380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28'.
[   28.193372][  T380] device veth1_macvtap left promiscuous mode
[   28.201855][  T380] device macsec0 left promiscuous mode
[   28.246209][  T393] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   28.391590][  T417] loop4: detected capacity change from 0 to 128
[   28.418659][  T418] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   28.709633][  T458] loop2: detected capacity change from 0 to 512
[   28.719015][  T458] EXT4-fs: Ignoring removed bh option
[   28.724639][  T458] EXT4-fs: Ignoring removed i_version option
[   28.740909][  T458] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   28.759662][  T458] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   28.769175][  T458] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   28.780306][  T463] process 'syz.3.60' launched './file1' with NULL argv: empty string added
[   28.794984][  T458] EXT4-fs (loop2): shut down requested (2)
[   28.811806][  T289] EXT4-fs (loop2): unmounting filesystem.
[   29.086890][  T491] loop2: detected capacity change from 0 to 128
[   29.093875][  T491] EXT4-fs: Ignoring removed bh option
[   29.104520][  T491] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   29.113910][  T491] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   29.139067][  T289] EXT4-fs (loop2): unmounting filesystem.
[   29.167655][  T496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'.
[   31.057135][    C1] sched: RT throttling activated
[   31.063644][   T28] kauditd_printk_skb: 188 callbacks suppressed
[   31.063659][   T28] audit: type=1326 audit(1794286776.655:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.3.69" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952b9a8f19 code=0x7fc00000
[   33.117034][   T28] audit: type=1400 audit(1794286778.705:263): avc:  denied  { name_bind } for  pid=513 comm="syz.0.83" src=28192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   33.185543][   T28] audit: type=1400 audit(1794286778.775:264): avc:  denied  { ioctl } for  pid=521 comm="syz.2.87" path="socket:[16718]" dev="sockfs" ino=16718 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   33.191241][  T524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.88'.
[   33.231872][  T524] bridge_slave_0: default FDB implementation only supports local addresses
[   33.246326][  T524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.88'.
[   33.255458][  T526] netlink: 240 bytes leftover after parsing attributes in process `syz.0.89'.
[   33.266840][  T530] loop4: detected capacity change from 0 to 512
[   33.268873][  T524] bridge_slave_0: default FDB implementation only supports local addresses
[   33.292289][  T530] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[   33.327381][   T28] audit: type=1400 audit(1794287034.973:265): avc:  denied  { read } for  pid=529 comm="syz.4.90" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   33.350269][  T534] FAULT_INJECTION: forcing a failure.
[   33.350269][  T534] name failslab, interval 1, probability 0, space 0, times 1
[   33.394588][  T540] loop1: detected capacity change from 0 to 512
[   33.403963][  T534] CPU: 0 PID: 534 Comm: syz.0.92 Not tainted syzkaller #0
[   33.411118][  T534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   33.412353][  T540] ext4: Unknown parameter 'appraise'
[   33.421210][  T534] Call Trace:
[   33.421219][  T534]  <TASK>
[   33.421228][  T534]  __dump_stack+0x21/0x24
[   33.437111][  T534]  dump_stack_lvl+0x110/0x170
[   33.441821][  T534]  ? __cfi_dump_stack_lvl+0x8/0x8
[   33.446875][  T534]  dump_stack+0x15/0x24
[   33.451066][  T534]  should_fail_ex+0x3bf/0x510
[   33.455768][  T534]  ? __alloc_file+0x28/0x2a0
[   33.460390][  T534]  __should_failslab+0xac/0xf0
[   33.465198][  T534]  should_failslab+0x9/0x20
[   33.469738][  T534]  kmem_cache_alloc+0x3b/0x320
[   33.474539][  T534]  ? __cfi__raw_spin_lock+0x10/0x10
[   33.479765][  T534]  __alloc_file+0x28/0x2a0
[   33.484224][  T534]  alloc_empty_file+0x97/0x180
[   33.489055][  T534]  alloc_file+0x59/0x600
[   33.493346][  T534]  ? _raw_spin_unlock+0x4c/0x70
[   33.498226][  T534]  alloc_file_pseudo+0x180/0x200
[   33.503205][  T534]  ? __cfi_alloc_file_pseudo+0x10/0x10
[   33.508703][  T534]  ? _raw_spin_unlock+0x4c/0x70
[   33.513587][  T534]  ? alloc_fd+0x4c1/0x570
[   33.517976][  T534]  sock_alloc_file+0xba/0x270
[   33.522702][  T534]  __sys_socket+0x138/0x1a0
[   33.527247][  T534]  __x64_sys_socket+0x7a/0x90
[   33.528422][   T28] audit: type=1400 audit(1794287035.003:266): avc:  denied  { create } for  pid=533 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   33.531953][  T534]  x64_sys_call+0x449/0x9a0
[   33.555481][  T534]  do_syscall_64+0x4c/0xa0
[   33.559961][  T534]  ? clear_bhb_loop+0x30/0x80
[   33.564706][  T534]  ? clear_bhb_loop+0x30/0x80
[   33.569413][  T534]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   33.575321][  T534] RIP: 0033:0x7fba9fba8f19
[   33.579766][  T534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   33.599392][  T534] RSP: 002b:00007fbaa0a12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   33.607877][  T534] RAX: ffffffffffffffda RBX: 00007fba9fe25fa0 RCX: 00007fba9fba8f19
[   33.615882][  T534] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f
[   33.623872][  T534] RBP: 00007fba9fc37f6d R08: 0000000000000000 R09: 0000000000000000
[   33.631853][  T534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   33.639834][  T534] R13: 00007fba9fe26038 R14: 00007fba9fe25fa0 R15: 00007ffd152986c8
[   33.647824][  T534]  </TASK>
[   33.667418][  T542] netlink: 20 bytes leftover after parsing attributes in process `syz.4.95'.
[   33.691320][  T557] loop4: detected capacity change from 0 to 256
[   33.698238][  T557] exfat: Deprecated parameter 'utf8'
[   33.703589][  T557] exfat: Deprecated parameter 'namecase'
[   33.708195][   T28] audit: type=1400 audit(1794287035.023:267): avc:  denied  { open } for  pid=529 comm="syz.4.90" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   33.717301][  T557] exfat: Deprecated parameter 'namecase'
[   33.750186][  T557] exfat: Deprecated parameter 'namecase'
[   33.764096][  T557] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[   33.801072][  T561] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   33.808351][   T28] audit: type=1400 audit(1794287035.023:268): avc:  denied  { ioctl } for  pid=529 comm="syz.4.90" path="/dev/rtc0" dev="devtmpfs" ino=263 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   33.846662][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   33.865087][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   33.885323][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   33.893791][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   33.907788][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   33.926258][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   33.947676][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   33.955752][   T28] audit: type=1400 audit(1794287035.603:269): avc:  denied  { unmount } for  pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   33.976281][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   34.115232][  T571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'.
[   34.238233][   T28] audit: type=1400 audit(1794287035.893:270): avc:  denied  { read } for  pid=581 comm="syz.3.107" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   34.261525][  T582] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   34.291177][   T28] audit: type=1400 audit(1794287035.893:271): avc:  denied  { open } for  pid=581 comm="syz.3.107" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   34.468118][  T598] ip_tables: iptables: counters copy to user failed while replacing table
[   34.714648][  T615] =======================================================
[   34.714648][  T615] WARNING: The mand mount option has been deprecated and
[   34.714648][  T615]          and is ignored by this kernel. Remove the mand
[   34.714648][  T615]          option from the mount to silence this warning.
[   34.714648][  T615] =======================================================
[   34.812892][  T621] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   34.827401][  T615] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   34.891428][  T626] af_packet: packet size is too long (65369 > 2016)
[   34.901090][  T628] loop3: detected capacity change from 0 to 512
[   34.924899][  T628] EXT4-fs: Ignoring removed nobh option
[   34.965124][  T633] device batadv_slave_1 entered promiscuous mode
[   34.972875][  T628] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.125: invalid indirect mapped block 256 (level 2)
[   34.994259][  T633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.126'.
[   35.024185][  T628] EXT4-fs (loop3): 2 truncates cleaned up
[   35.032236][  T628] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   35.088295][  T628] EXT4-fs (loop3): shut down requested (0)
[   35.154016][  T287] EXT4-fs (loop3): unmounting filesystem.
[   35.163200][  T635] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.170457][  T635] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.261136][  T630] device batadv_slave_1 left promiscuous mode
[   35.370341][  T651] device lo entered promiscuous mode
[   35.397357][  T651] device tunl0 entered promiscuous mode
[   35.437561][  T651] device gre0 entered promiscuous mode
[   35.456672][  T651] device gretap0 entered promiscuous mode
[   35.487186][  T651] device erspan0 entered promiscuous mode
[   35.494347][  T651] device ip_vti0 entered promiscuous mode
[   35.513359][  T651] device ip6_vti0 entered promiscuous mode
[   35.534618][  T651] device sit0 entered promiscuous mode
[   35.545266][  T651] device ip6tnl0 entered promiscuous mode
[   35.564736][  T651] device ip6gre0 entered promiscuous mode
[   35.574795][  T651] device ip6gretap0 entered promiscuous mode
[   35.595559][  T651] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.602801][  T651] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.627248][  T651] device bridge0 entered promiscuous mode
[   35.637327][  T651] device vcan0 entered promiscuous mode
[   35.653667][  T651] device dummy0 entered promiscuous mode
[   35.665782][  T651] device veth0 entered promiscuous mode
[   35.672832][  T651] device veth1 entered promiscuous mode
[   35.693628][  T651] device wg0 entered promiscuous mode
[   35.703215][  T651] device wg1 entered promiscuous mode
[   35.717917][  T651] device wg2 entered promiscuous mode
[   35.727865][  T651] device veth0_to_bridge entered promiscuous mode
[   35.747612][  T651] device veth1_to_bridge entered promiscuous mode
[   35.756786][  T651] device veth0_to_bond entered promiscuous mode
[   35.764250][  T651] device bond_slave_0 entered promiscuous mode
[   35.779017][  T651] device veth1_to_bond entered promiscuous mode
[   35.787839][  T651] device bond_slave_1 entered promiscuous mode
[   35.794358][  T651] device veth0_to_team entered promiscuous mode
[   35.807983][  T651] device team_slave_0 entered promiscuous mode
[   35.814445][  T651] device veth1_to_team entered promiscuous mode
[   35.839365][  T651] device team_slave_1 entered promiscuous mode
[   35.856650][  T651] device veth0_to_batadv entered promiscuous mode
[   35.875279][  T651] device batadv_slave_0 entered promiscuous mode
[   35.884522][  T651] device veth1_to_batadv entered promiscuous mode
[   35.892764][  T651] device batadv_slave_1 entered promiscuous mode
[   35.928473][  T651] device xfrm0 entered promiscuous mode
[   35.938077][  T651] device veth0_to_hsr entered promiscuous mode
[   35.950119][  T651] device hsr_slave_0 entered promiscuous mode
[   35.961582][  T665] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   35.975142][  T680] loop0: detected capacity change from 0 to 512
[   35.983856][  T665] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   35.994958][  T680] EXT4-fs: Ignoring removed nobh option
[   36.008203][  T651] device veth1_to_hsr entered promiscuous mode
[   36.026630][  T651] device hsr_slave_1 entered promiscuous mode
[   36.044312][  T680] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.139: invalid indirect mapped block 256 (level 2)
[   36.048237][  T651] device veth1_virt_wifi entered promiscuous mode
[   36.068254][  T651] device veth0_virt_wifi entered promiscuous mode
[   36.083161][  T651] device veth1_vlan entered promiscuous mode
[   36.109767][  T680] EXT4-fs (loop0): 2 truncates cleaned up
[   36.115547][  T680] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   36.126387][  T651] device vlan0 entered promiscuous mode
[   36.132410][  T651] device vlan1 entered promiscuous mode
[   36.138402][  T651] device veth1_macvtap entered promiscuous mode
[   36.145463][  T651] device veth0_macvtap entered promiscuous mode
[   36.152721][  T651] device ip6gre1 entered promiscuous mode
[   36.229052][  T680] EXT4-fs (loop0): shut down requested (0)
[   36.249366][   T28] kauditd_printk_skb: 13 callbacks suppressed
[   36.249381][   T28] audit: type=1400 audit(1794287037.903:285): avc:  denied  { write } for  pid=673 comm="syz.3.137" name="hidraw0" dev="devtmpfs" ino=585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   36.324955][  T288] EXT4-fs (loop0): unmounting filesystem.
[   36.352610][  T694] loop0: detected capacity change from 0 to 512
[   36.388708][  T694] EXT4-fs (loop0): Test dummy encryption mode enabled
[   36.395565][  T694] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   36.432128][  T694] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   36.463181][  T694] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.141: bad orphan inode 131083
[   36.516759][  T694] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   36.532075][   T28] audit: type=1400 audit(1794287038.183:286): avc:  denied  { append } for  pid=709 comm="syz.3.146" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   36.570775][  T704] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   36.584166][  T565] syz.2.97 (565) used greatest stack depth: 21856 bytes left
[   36.605524][   T28] audit: type=1400 audit(1794287038.253:287): avc:  denied  { create } for  pid=693 comm="syz.0.141" name="tracefs" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   36.639237][  T710] Disabled LAPIC found during irq injection
[   36.651468][  T694] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   36.678863][   T28] audit: type=1400 audit(1794287038.333:288): avc:  denied  { read } for  pid=716 comm="syz.4.147" dev="nsfs" ino=4026532638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   36.681442][  T694] EXT4-fs (loop0): unmounting filesystem.
[   36.726259][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   36.727957][   T28] audit: type=1400 audit(1794287038.353:289): avc:  denied  { open } for  pid=716 comm="syz.4.147" path="net:[4026532638]" dev="nsfs" ino=4026532638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   36.765193][  T720] loop4: detected capacity change from 0 to 2048
[   36.771824][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   36.787980][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   36.807830][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   36.827452][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   36.835582][   T28] audit: type=1400 audit(1794287038.353:290): avc:  denied  { shutdown } for  pid=716 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   36.856896][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   36.860154][  T720] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   36.866329][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   36.877708][   T28] audit: type=1400 audit(1794287038.353:291): avc:  denied  { read } for  pid=716 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   36.882799][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   36.925622][  T720] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.948177][  T720] fs-verity: sha512 using implementation "sha512-avx2"
[   36.955172][   T28] audit: type=1400 audit(1794287038.603:292): avc:  denied  { append } for  pid=719 comm="syz.4.148" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   36.978176][  T720] fs-verity (loop4, inode 13): Error -14 reading file data
[   36.985522][   T28] audit: type=1400 audit(1794287038.603:293): avc:  denied  { ioctl } for  pid=719 comm="syz.4.148" path="/26/file0/file0/file0" dev="loop4" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   37.017729][  T704] syz.2.144 (704) used greatest stack depth: 20320 bytes left
[   37.027366][  T720] fs-verity (loop4, inode 13): Error -14 building Merkle tree
[   37.068876][  T290] EXT4-fs (loop4): unmounting filesystem.
[   37.076148][   T28] audit: type=1400 audit(1794287038.723:294): avc:  denied  { read write } for  pid=730 comm="syz.2.151" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   37.255267][  T739] overlayfs: invalid origin (0000)
[   37.307417][  T733] loop4: detected capacity change from 0 to 40427
[   37.319465][  T733] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   37.327507][  T733] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   37.336852][  T733] F2FS-fs (loop4): invalid crc value
[   37.354822][  T733] F2FS-fs (loop4): Found nat_bits in checkpoint
[   37.367391][   T39] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   37.402034][  T733] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   37.409223][  T733] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   37.557951][   T39] usb 3-1: not running at top speed; connect to a high speed hub
[   37.564080][  T733] syz.4.152: attempt to access beyond end of device
[   37.564080][  T733] loop4: rw=2049, sector=77824, nr_sectors = 4096 limit=40427
[   37.577786][   T39] usb 3-1: config 1 has an invalid descriptor of length 187, skipping remainder of the config
[   37.597184][   T39] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[   37.604877][  T733] syz.4.152: attempt to access beyond end of device
[   37.604877][  T733] loop4: rw=2049, sector=49152, nr_sectors = 4096 limit=40427
[   37.628958][   T39] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   37.651730][   T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   37.654317][  T744] syz.4.152: attempt to access beyond end of device
[   37.654317][  T744] loop4: rw=2049, sector=57344, nr_sectors = 1640 limit=40427
[   37.698307][  T746] loop3: detected capacity change from 0 to 128
[   37.704681][  T747] overlayfs: Cannot mount volatile when upperdir has an unseen error. Sync upperdir fs to clear state.
[   37.722493][  T682] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   37.743422][  T733] syz.4.152: attempt to access beyond end of device
[   37.743422][  T733] loop4: rw=2049, sector=58984, nr_sectors = 5160 limit=40427
[   37.758296][  T682] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   37.760149][  T746] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   37.817233][  T746] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.886532][   T39] usb 3-1: string descriptor 0 read error: -71
[   37.894401][   T39] usb 3-1: Found UVC 71.01 device <unnamed> (0000:0000)
[   37.901498][   T39] usb 3-1: No valid video chain found.
[   37.908184][   T39] usb 3-1: USB disconnect, device number 2
[   37.954628][  T433] kworker/u4:5: attempt to access beyond end of device
[   37.954628][  T433] loop4: rw=1, sector=77824, nr_sectors = 8 limit=40427
[   37.969090][  T433] kworker/u4:5: attempt to access beyond end of device
[   37.969090][  T433] loop4: rw=1, sector=77856, nr_sectors = 8 limit=40427
[   38.120210][  T763] Disabled LAPIC found during irq injection
[   38.219621][  T287] EXT4-fs (loop3): unmounting filesystem.
[   38.227087][  T769] loop0: detected capacity change from 0 to 512
[   38.516860][  T792] loop0: detected capacity change from 0 to 512
[   38.557191][  T792] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   38.566279][  T792] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.614912][  T288] EXT4-fs (loop0): unmounting filesystem.
[   38.809375][  T826] loop0: detected capacity change from 0 to 512
[   38.847030][  T826] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   38.860801][  T826] System zones: 1-12
[   38.868283][  T826] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.177: missing EA_INODE flag
[   38.896853][  T826] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.177: error while reading EA inode 12 err=-117
[   38.914147][  T826] EXT4-fs (loop0): 1 orphan inode deleted
[   38.920202][  T826] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   38.969658][  T288] EXT4-fs (loop0): unmounting filesystem.
[   39.006512][  T833] FAULT_INJECTION: forcing a failure.
[   39.006512][  T833] name fail_futex, interval 1, probability 0, space 0, times 1
[   39.019518][  T833] CPU: 0 PID: 833 Comm: syz.0.180 Not tainted syzkaller #0
[   39.026757][  T833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   39.036835][  T833] Call Trace:
[   39.040138][  T833]  <TASK>
[   39.043097][  T833]  __dump_stack+0x21/0x24
[   39.047453][  T833]  dump_stack_lvl+0x110/0x170
[   39.052155][  T833]  ? __cfi_dump_stack_lvl+0x8/0x8
[   39.057198][  T833]  ? __cfi_enqueue_task_fair+0x10/0x10
[   39.062702][  T833]  dump_stack+0x15/0x24
[   39.066885][  T833]  should_fail_ex+0x3bf/0x510
[   39.071587][  T833]  should_fail+0xb/0x10
[   39.075769][  T833]  get_futex_key+0x143/0xb10
[   39.080401][  T833]  ? tracing_record_taskinfo_sched_switch+0x80/0x3a0
[   39.087125][  T833]  ? __cfi_get_futex_key+0x10/0x10
[   39.092276][  T833]  ? probe_sched_wakeup+0x71/0x90
[   39.097344][  T833]  ? ttwu_do_wakeup+0x468/0x490
[   39.102239][  T833]  futex_wait_setup+0xb8/0x260
[   39.107035][  T833]  ? __cfi_futex_wait_setup+0x10/0x10
[   39.112434][  T833]  ? _raw_spin_unlock_irqrestore+0x5a/0x80
[   39.118278][  T833]  ? futex_setup_timer+0xb0/0xc0
[   39.123255][  T833]  futex_wait+0x1ce/0x900
[   39.127616][  T833]  ? __cfi_futex_wait+0x10/0x10
[   39.132500][  T833]  ? __cfi_futex_wake+0x10/0x10
[   39.137384][  T833]  ? __kasan_check_write+0x14/0x20
[   39.142542][  T833]  ? fput+0x154/0x1a0
[   39.146567][  T833]  do_futex+0x2e2/0x430
[   39.150754][  T833]  ? __cfi___sys_sendto+0x10/0x10
[   39.155829][  T833]  ? __cfi_do_futex+0x10/0x10
[   39.160534][  T833]  __se_sys_futex+0x136/0x310
[   39.165241][  T833]  ? __x64_sys_futex+0x100/0x100
[   39.170206][  T833]  ? xfd_validate_state+0x70/0x150
[   39.175367][  T833]  __x64_sys_futex+0xe5/0x100
[   39.180294][  T833]  x64_sys_call+0x7ec/0x9a0
[   39.184835][  T833]  do_syscall_64+0x4c/0xa0
[   39.189286][  T833]  ? clear_bhb_loop+0x30/0x80
[   39.193998][  T833]  ? clear_bhb_loop+0x30/0x80
[   39.198707][  T833]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   39.204626][  T833] RIP: 0033:0x7fba9fba8f19
[   39.209085][  T833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   39.228712][  T833] RSP: 002b:00007fbaa0a120e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   39.237149][  T833] RAX: ffffffffffffffda RBX: 00007fba9fe25fa8 RCX: 00007fba9fba8f19
[   39.245145][  T833] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fba9fe25fa8
[   39.253421][  T833] RBP: 00007fba9fe25fa0 R08: 0000000000000000 R09: 0000000000000000
[   39.261417][  T833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   39.269411][  T833] R13: 00007fba9fe26038 R14: 00007ffd152985e0 R15: 00007ffd152986c8
[   39.277416][  T833]  </TASK>
[   39.637269][  T671] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   39.729781][  T858] loop1: detected capacity change from 0 to 512
[   39.770992][  T860] loop4: detected capacity change from 0 to 512
[   39.783184][  T858] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   39.802130][  T860] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   39.810298][  T858] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.815467][  T860] System zones: 1-12
[   39.827934][  T671] usb 3-1: Using ep0 maxpacket: 8
[   39.834182][  T671] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   39.844665][  T671] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   39.853824][  T860] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.190: missing EA_INODE flag
[   39.865501][  T671] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   39.868738][  T860] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.190: error while reading EA inode 12 err=-117
[   39.887739][  T671] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[   39.899067][  T671] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   39.907519][  T860] EXT4-fs (loop4): 1 orphan inode deleted
[   39.911749][  T671] usb 3-1: Product: syz
[   39.920694][  T286] EXT4-fs (loop1): unmounting filesystem.
[   39.920877][  T671] usb 3-1: Manufacturer: syz
[   39.927385][  T860] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   39.936953][  T671] usb 3-1: SerialNumber: syz
[   39.989423][  T290] EXT4-fs (loop4): unmounting filesystem.
[   40.016452][  T871] FAULT_INJECTION: forcing a failure.
[   40.016452][  T871] name fail_futex, interval 1, probability 0, space 0, times 0
[   40.038195][  T871] CPU: 1 PID: 871 Comm: syz.4.194 Not tainted syzkaller #0
[   40.045452][  T871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   40.055537][  T871] Call Trace:
[   40.058833][  T871]  <TASK>
[   40.061787][  T871]  __dump_stack+0x21/0x24
[   40.066147][  T871]  dump_stack_lvl+0x110/0x170
[   40.070868][  T871]  ? __cfi_dump_stack_lvl+0x8/0x8
[   40.075945][  T871]  ? __cfi_enqueue_task_fair+0x10/0x10
[   40.081429][  T871]  dump_stack+0x15/0x24
[   40.085612][  T871]  should_fail_ex+0x3bf/0x510
[   40.090319][  T871]  should_fail+0xb/0x10
[   40.094498][  T871]  get_futex_key+0x143/0xb10
[   40.099128][  T871]  ? tracing_record_taskinfo_sched_switch+0x80/0x3a0
[   40.105837][  T871]  ? __cfi_get_futex_key+0x10/0x10
[   40.111171][  T871]  ? probe_sched_wakeup+0x71/0x90
[   40.116251][  T871]  ? ttwu_do_wakeup+0x468/0x490
[   40.121140][  T871]  futex_wait_setup+0xb8/0x260
[   40.125931][  T871]  ? __cfi_futex_wait_setup+0x10/0x10
[   40.131360][  T871]  ? _raw_spin_unlock_irqrestore+0x5a/0x80
[   40.137235][  T871]  ? futex_setup_timer+0xb0/0xc0
[   40.142212][  T871]  futex_wait+0x1ce/0x900
[   40.146575][  T871]  ? __cfi_futex_wait+0x10/0x10
[   40.151479][  T871]  ? __cfi_futex_wake+0x10/0x10
[   40.156366][  T871]  ? __kasan_check_write+0x14/0x20
[   40.161508][  T871]  ? fput+0x154/0x1a0
[   40.165530][  T871]  do_futex+0x2e2/0x430
[   40.169738][  T871]  ? __cfi___sys_sendto+0x10/0x10
[   40.174806][  T871]  ? __cfi_do_futex+0x10/0x10
[   40.179513][  T871]  __se_sys_futex+0x136/0x310
[   40.184223][  T871]  ? __x64_sys_futex+0x100/0x100
[   40.189192][  T871]  ? xfd_validate_state+0x70/0x150
[   40.194380][  T871]  __x64_sys_futex+0xe5/0x100
[   40.199083][  T871]  x64_sys_call+0x7ec/0x9a0
[   40.203626][  T871]  do_syscall_64+0x4c/0xa0
[   40.208076][  T871]  ? clear_bhb_loop+0x30/0x80
[   40.212786][  T871]  ? clear_bhb_loop+0x30/0x80
[   40.217495][  T871]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   40.223425][  T871] RIP: 0033:0x7fda1efa8f19
[   40.227868][  T871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   40.247497][  T871] RSP: 002b:00007fda1fd7f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   40.255945][  T871] RAX: ffffffffffffffda RBX: 00007fda1f225fa8 RCX: 00007fda1efa8f19
[   40.263946][  T871] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fda1f225fa8
[   40.271946][  T871] RBP: 00007fda1f225fa0 R08: 0000000000000000 R09: 0000000000000000
[   40.279948][  T871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   40.287953][  T871] R13: 00007fda1f226038 R14: 00007ffd75e56cc0 R15: 00007ffd75e56da8
[   40.296396][  T871]  </TASK>
[   40.331719][  T876] loop0: detected capacity change from 0 to 256
[   40.355885][  T876] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   40.383888][  T874] loop1: detected capacity change from 0 to 40427
[   40.395498][  T874] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[   40.406715][  T874] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   40.416850][  T880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.198'.
[   40.446008][  T874] F2FS-fs (loop1): Found nat_bits in checkpoint
[   40.490480][  T874] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   40.497721][  T874] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   40.567309][  T671] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[   40.579264][  T671] usb 3-1: clock source 0 is not valid, cannot use
[   40.690241][  T905] loop1: detected capacity change from 0 to 1024
[   40.697208][  T905] EXT4-fs: Ignoring removed orlov option
[   40.703417][  T905] EXT4-fs (loop1): required journal recovery suppressed and not mounted read-only
[   40.788739][  T671] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[   40.827331][  T671] usb 3-1: USB disconnect, device number 3
[   40.874379][  T910] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   40.933024][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   40.942918][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   40.954808][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   40.964785][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.971905][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.988612][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   40.997906][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   41.006353][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.013453][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   41.021264][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   41.035622][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   41.044152][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   41.052702][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   41.061038][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   41.070566][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   41.079028][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   41.087283][   T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   41.101036][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   41.109674][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   41.117994][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   41.131625][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   41.147906][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   41.159581][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   41.168103][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   41.176175][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   41.184894][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   41.196326][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   41.204712][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   41.213182][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   41.221689][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   41.229858][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   41.237944][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   41.245736][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   41.253612][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   41.261868][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   41.270236][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   41.280379][   T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   41.292584][   T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   41.302776][   T39] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   41.315815][   T39] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   41.324966][   T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   41.326804][  T930] loop3: detected capacity change from 0 to 512
[   41.343519][   T39] usb 1-1: config 0 descriptor??
[   41.354704][  T932] loop2: detected capacity change from 0 to 16
[   41.368850][  T930] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   41.404248][  T930] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.215: bad orphan inode 15
[   41.427216][  T318] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   41.435101][  T930] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   41.447164][  T930] EXT4-fs error (device loop3): __ext4_new_inode:1081: comm syz.3.215: reserved inode found cleared - inode=17
[   41.467415][  T287] EXT4-fs (loop3): unmounting filesystem.
[   41.525043][  T940] loop2: detected capacity change from 0 to 16
[   41.545364][  T940] erofs: (device loop2): mounted with root inode @ nid 36.
[   41.574093][   T28] kauditd_printk_skb: 41 callbacks suppressed
[   41.574108][   T28] audit: type=1400 audit(1794287043.223:336): avc:  denied  { append } for  pid=939 comm="syz.2.219" name="file1" dev="overlay" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   41.611933][   T28] audit: type=1400 audit(1794287043.263:337): avc:  denied  { open } for  pid=939 comm="syz.2.219" path="/39/bus/file1" dev="overlay" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   41.635388][   T28] audit: type=1400 audit(1794287043.263:338): avc:  denied  { write } for  pid=939 comm="syz.2.219" path=2F202864656C6574656429 dev="tmpfs" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   41.658969][   T28] audit: type=1400 audit(1794287043.263:339): avc:  denied  { setattr } for  pid=939 comm="syz.2.219" name="#230" dev="tmpfs" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   41.672135][  T318] usb 2-1: unable to get BOS descriptor or descriptor too short
[   41.689119][   T28] audit: type=1400 audit(1794287043.263:340): avc:  denied  { link } for  pid=939 comm="syz.2.219" name="#230" dev="tmpfs" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   41.717651][   T28] audit: type=1400 audit(1794287043.263:341): avc:  denied  { read } for  pid=939 comm="syz.2.219" name="file1" dev="tmpfs" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   41.741227][   T28] audit: type=1400 audit(1794287043.263:342): avc:  denied  { unlink } for  pid=289 comm="syz-executor" name="file1" dev="tmpfs" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   41.763803][  T318] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   41.774553][  T318] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   41.784614][   T39] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd
[   41.793825][   T39] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[   41.803917][  T318] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[   41.813526][  T318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.814119][  T944] ptp ptp0: new virtual clock ptp1
[   41.823849][   T39] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   41.839229][  T318] usb 2-1: Product: syz
[   41.843430][  T318] usb 2-1: Manufacturer: syz
[   41.845452][  T944] ptp ptp0: new virtual clock ptp2
[   41.854870][  T318] usb 2-1: SerialNumber: syz
[   41.861230][  T944] ptp ptp0: new virtual clock ptp3
[   41.872481][  T944] ptp ptp0: new virtual clock ptp4
[   41.884487][  T944] ptp ptp0: new virtual clock ptp5
[   41.889963][  T944] ptp ptp0: guarantee physical clock free running
[   41.897218][  T309] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   41.903963][  T318] usb 2-1: selecting invalid altsetting 1
[   41.921964][  T318] usb 2-1: unit 6 not found!
[   41.964524][  T959] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   42.058569][  T682] usb 1-1: USB disconnect, device number 2
[   42.078074][  T966] loop2: detected capacity change from 0 to 512
[   42.091546][  T309] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[   42.100806][  T309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.110017][  T309] usb 5-1: Product: syz
[   42.114377][  T309] usb 5-1: Manufacturer: syz
[   42.119557][  T309] usb 5-1: SerialNumber: syz
[   42.122068][  T966] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082]
[   42.133025][  T966] System zones: 0-2, 18-18, 34-34
[   42.143353][  T966] EXT4-fs (loop2): 1 orphan inode deleted
[   42.149353][  T966] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   42.158438][  T433] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   42.158920][  T966] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   42.169476][  T433] EXT4-fs error (device loop2): ext4_release_dquot:6864: comm kworker/u4:5: Failed to release dquot type 1
[   42.196180][   T28] audit: type=1400 audit(1794287043.843:343): avc:  denied  { watch } for  pid=965 comm="syz.2.226" path="/42/bus" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   42.218415][   T28] audit: type=1400 audit(1794287043.843:344): avc:  denied  { execute } for  pid=965 comm="syz.2.226" name="file1" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   42.492200][  T318] usb 2-1: 2:0: failed to get current value for ch 0 (-71)
[   42.502413][  T318] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[   42.510529][  T318] usb 2-1: USB disconnect, device number 2
[   42.541912][  T309] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[   42.717655][  T756] udevd[756]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   42.740775][  T289] EXT4-fs (loop2): unmounting filesystem.
[   42.885276][  T979] EXT4-fs: Ignoring removed orlov option
[   42.898290][  T979] EXT4-fs (loop3): required journal recovery suppressed and not mounted read-only
[   43.210654][ T1004] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   43.238635][ T1004] kvm: pic: non byte read
[   43.243451][ T1004] kvm: pic: non byte read
[   43.248343][ T1004] kvm: pic: single mode not supported
[   43.248355][ T1004] kvm: pic: level sensitive irq not supported
[   43.253966][ T1004] kvm: pic: non byte read
[   43.265123][ T1004] kvm: pic: non byte read
[   43.515576][ T1014] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   43.597164][  T682] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   43.726814][ T1020] hub 1-0:1.0: USB hub found
[   43.732136][ T1020] hub 1-0:1.0: 1 port detected
[   43.797366][  T682] usb 2-1: Using ep0 maxpacket: 32
[   43.804633][  T682] usb 2-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 1024
[   43.815506][  T682] usb 2-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1024
[   43.825940][  T682] usb 2-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   43.839680][  T682] usb 2-1: config 1 interface 0 has no altsetting 0
[   43.850110][  T682] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   43.859252][  T682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.867539][  T682] usb 2-1: Product: ⠊
[   43.871727][  T682] usb 2-1: Manufacturer: ꍚ
[   43.876600][  T682] usb 2-1: SerialNumber: syz
[   43.882721][ T1010] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   43.890951][ T1010] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   43.958718][ T1024] set_capacity_and_notify: 2 callbacks suppressed
[   43.958731][ T1024] loop3: detected capacity change from 0 to 40427
[   43.972779][ T1024] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[   43.979671][ T1024] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   44.000695][ T1024] F2FS-fs (loop3): Found nat_bits in checkpoint
[   44.085395][ T1024] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   44.092774][ T1024] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   44.168115][  T682] cdc_ether: probe of 2-1:1.0 failed with error -71
[   44.183550][  T682] usb 2-1: USB disconnect, device number 3
[   44.200544][ T1043] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   44.218367][ T1043] kvm: pic: non byte read
[   44.223111][ T1043] kvm: pic: non byte read
[   44.227731][ T1043] kvm: pic: single mode not supported
[   44.227760][ T1043] kvm: pic: level sensitive irq not supported
[   44.233379][ T1043] kvm: pic: non byte read
[   44.244296][ T1043] kvm: pic: non byte read
[   44.553431][  T682] usb 5-1: USB disconnect, device number 2
[   44.566676][  T682] usblp0: removed
[   44.898808][ T1080] loop2: detected capacity change from 0 to 128
[   44.945873][ T1080] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   44.959122][ T1080] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   45.060856][  T289] EXT4-fs (loop2): unmounting filesystem.
[   45.075722][ T1087] loop0: detected capacity change from 0 to 1024
[   45.128392][ T1087] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.264: Failed to acquire dquot type 0
[   45.165935][ T1087] EXT4-fs (loop0): 1 truncate cleaned up
[   45.181723][ T1087] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   45.245392][  T288] EXT4-fs (loop0): unmounting filesystem.
[   45.379922][ T1104] loop3: detected capacity change from 0 to 1024
[   45.409391][ T1104] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   45.467493][ T1109] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[   45.620683][  T287] EXT4-fs (loop3): unmounting filesystem.
[   45.980114][ T1146] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   46.003775][ T1150] binder: 1148:1150 ioctl c0306201 2000000000c0 returned -14
[   46.012406][ T1150] binder: 1148:1150 ioctl c0306201 2000000001c0 returned -14
[   46.084440][ T1156] loop1: detected capacity change from 0 to 512
[   46.108011][ T1156] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[   46.120540][ T1156] FAT-fs (loop1): Filesystem has been set read-only
[   46.357027][ T1173] loop2: detected capacity change from 0 to 512
[   46.371992][ T1173] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   46.697907][ T1176] loop4: detected capacity change from 0 to 512
[   46.717364][ T1176] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.296: inode has both inline data and extents flags
[   46.731136][ T1176] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.296: couldn't read orphan inode 15 (err -117)
[   46.743170][ T1176] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   46.759234][ T1176] Invalid argument reading file caps for ./file0
[   46.775233][  T290] EXT4-fs (loop4): unmounting filesystem.
[   46.820821][ T1184] loop3: detected capacity change from 0 to 256
[   46.840345][ T1184] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   46.861407][ T1184] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[   46.862093][ T1179] kvm: pic: single mode not supported
[   46.873118][ T1179] kvm: pic: single mode not supported
[   46.880013][ T1184] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d)
[   46.912107][   T28] kauditd_printk_skb: 26 callbacks suppressed
[   46.912122][   T28] audit: type=1400 audit(1794287048.563:369): avc:  denied  { write open } for  pid=1183 comm="syz.3.299" path="/75/file2/file0/bus" dev="loop3" ino=1048658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   46.944776][   T28] audit: type=1400 audit(1794287048.563:370): avc:  denied  { mounton } for  pid=1183 comm="syz.3.299" path="/75/file2/file0/bus" dev="loop3" ino=1048658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   46.977364][   T28] audit: type=1400 audit(1794287048.623:371): avc:  denied  { append } for  pid=1183 comm="syz.3.299" path="/75/file2/file0/file0" dev="loop3" ino=1048659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   47.032363][  T287] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4)
[   47.044142][  T287] exFAT-fs (loop3): Filesystem has been set read-only
[   47.053008][  T287] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4)
[   47.192005][   T28] audit: type=1326 audit(1794287048.833:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1172 comm="syz.2.295" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fd632da8f19 code=0x7fc00000
[   47.263530][ T1199] loop4: detected capacity change from 0 to 128
[   47.298078][ T1199] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   47.316895][ T1199] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.325444][   T28] audit: type=1400 audit(1794287048.963:373): avc:  denied  { mounton } for  pid=1202 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   47.360156][   T28] audit: type=1400 audit(1794287048.983:374): avc:  denied  { create } for  pid=1202 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   47.400111][   T28] audit: type=1400 audit(1794287049.043:375): avc:  denied  { setattr } for  pid=1198 comm="syz.4.308" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   47.410599][  T290] EXT4-fs (loop4): unmounting filesystem.
[   47.423154][   T28] audit: type=1400 audit(1794287049.043:376): avc:  denied  { write } for  pid=1198 comm="syz.4.308" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   47.449675][   T28] audit: type=1400 audit(1794287049.043:377): avc:  denied  { add_name } for  pid=1198 comm="syz.4.308" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   47.469959][  T682] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   47.502511][ T1202] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.509831][ T1202] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.518043][ T1202] device bridge_slave_0 entered promiscuous mode
[   47.526556][ T1202] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.533829][ T1202] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.541298][ T1202] device bridge_slave_1 entered promiscuous mode
[   47.567224][  T668] usb 3-1: new low-speed USB device number 4 using dummy_hcd
[   47.605317][ T1202] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.612435][ T1202] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.619790][ T1202] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.626855][ T1202] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.656739][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   47.658122][  T682] usb 2-1: Using ep0 maxpacket: 16
[   47.671271][  T433] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.679544][  T433] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.687500][  T682] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   47.698063][  T682] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   47.710735][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   47.719607][  T433] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.726706][  T433] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.734438][  T682] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   47.743739][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   47.752260][  T682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.759219][  T668] usb 3-1: unable to get BOS descriptor or descriptor too short
[   47.762569][  T433] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.774996][  T433] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.778300][  T668] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   47.783417][  T682] usb 2-1: Product: syz
[   47.796546][  T682] usb 2-1: Manufacturer: syz
[   47.801207][  T682] usb 2-1: SerialNumber: syz
[   47.804442][  T668] usb 3-1: string descriptor 0 read error: -22
[   47.822026][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   47.829895][  T668] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   47.847528][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   47.855569][  T668] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.865764][  T308] device bridge_slave_1 left promiscuous mode
[   47.872961][  T308] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.880828][  T668] cdc_ether 3-1:1.0: skipping garbage
[   47.886244][  T668] usb 3-1: bad CDC descriptors
[   47.892682][  T308] device bridge_slave_0 left promiscuous mode
[   47.898970][  T308] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.909485][  T308] device veth1_macvtap left promiscuous mode
[   47.915632][  T308] device veth0_vlan left promiscuous mode
[   47.927919][ T1214] loop4: detected capacity change from 0 to 512
[   47.945025][ T1214] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[   48.013944][ T1215] overlayfs: statfs failed on './file0'
[   48.020174][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   48.023613][  T682] usb 2-1: 0:2 : does not exist
[   48.037164][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   48.045544][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   48.046375][  T682] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[   48.056847][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   48.071200][ T1202] device veth0_vlan entered promiscuous mode
[   48.085621][  T682] usb 2-1: USB disconnect, device number 4
[   48.095744][   T28] audit: type=1400 audit(1794287049.743:378): avc:  denied  { create } for  pid=1216 comm="syz.4.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   48.120413][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   48.129239][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   48.158577][ T1202] device veth1_macvtap entered promiscuous mode
[   48.170188][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   48.178339][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   48.186607][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   48.206197][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   48.215004][ T1197] x_tables: duplicate underflow at hook 2
[   48.223163][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   48.229121][  T309] usb 3-1: USB disconnect, device number 4
[   48.318256][  T756] udevd[756]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   48.624246][ T1242] resource: resource sanity check: requesting [mem 0x00000000fe800000-0x00000000fe801fff], which spans more than 0000:00:03.0 [mem 0xfe800000-0xfe80007f]
[   48.640766][ T1242] caller generic_access_phys+0x1de/0x360 mapping multiple BARs
[   48.649852][ T1235] kvm: emulating exchange as write
[   48.813930][ T1258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.328'.
[   48.833064][ T1258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.328'.
[   48.842200][ T1258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.328'.
[   48.857171][ T1258] netlink: 108 bytes leftover after parsing attributes in process `syz.0.328'.
[   48.873300][ T1261] device-mapper: table: 252:1: snapshot: COW device cannot be the same as origin device (-EINVAL)
[   48.884159][ T1261] device-mapper: ioctl: error adding target to table
[   49.009515][ T1270] device syzkaller0 entered promiscuous mode
[   49.064668][ T1262] loop2: detected capacity change from 0 to 40427
[   49.079976][ T1262] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   49.088272][ T1262] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   49.137112][ T1262] F2FS-fs (loop2): Found nat_bits in checkpoint
[   49.218391][ T1262] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   49.225937][ T1262] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   49.234223][ T1284] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[   49.258771][ T1291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.338'.
[   49.268365][ T1291] syz.1.338 uses obsolete (PF_INET,SOCK_PACKET)
[   49.278179][ T1291] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   49.286242][ T1291] device gretap1 entered promiscuous mode
[   49.309953][ T1262] syz.2.329: attempt to access beyond end of device
[   49.309953][ T1262] loop2: rw=2049, sector=77824, nr_sectors = 408 limit=40427
[   49.549965][ T1306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.343'.
[   49.659650][ T1311] cgroup: name respecified
[   49.698823][ T1313] loop4: detected capacity change from 0 to 512
[   49.718389][ T1313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.346'.
[   49.794195][ T1315] loop4: detected capacity change from 0 to 1024
[   49.811425][ T1315] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[   49.825022][ T1315] loop4: detected capacity change from 0 to 256
[   49.841441][ T1315] exfat: Unknown parameter '18446744073709551615'
[   49.888505][ T1317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.348'.
[   49.995712][ T1324] Zero length message leads to an empty skb
[   50.030715][ T1326] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   50.052672][ T1326] overlayfs: failed to set xattr on upper
[   50.141688][ T1330] loop5: detected capacity change from 0 to 512
[   50.198818][ T1330] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.354: inode has both inline data and extents flags
[   50.247051][ T1330] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.354: couldn't read orphan inode 15 (err -117)
[   50.281974][ T1330] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   50.326819][ T1336] netlink: 20 bytes leftover after parsing attributes in process `syz.4.356'.
[   50.339092][ T1330] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 7952 vs 220 free clusters
[   50.399139][ T1336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=1336 comm=syz.4.356
[   50.427787][ T1202] EXT4-fs (loop5): unmounting filesystem.
[   50.660625][ T1355] netlink: 16 bytes leftover after parsing attributes in process `syz.5.359'.
[   50.831980][ T1370] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   50.842055][ T1370] kvm: pic: non byte read
[   50.846719][ T1370] kvm: pic: level sensitive irq not supported
[   50.846783][ T1370] kvm: pic: non byte read
[   50.857620][ T1370] kvm: pic: level sensitive irq not supported
[   50.857718][ T1370] kvm: pic: non byte read
[   50.868587][ T1370] kvm: pic: level sensitive irq not supported
[   50.868677][ T1370] kvm: pic: non byte read
[   50.879785][ T1370] kvm: pic: level sensitive irq not supported
[   50.881087][ T1370] kvm: pic: non byte read
[   50.904557][ T1378] binder: 1377:1378 ioctl c0306201 200000000cc0 returned -14
[   51.235183][ T1400] loop1: detected capacity change from 0 to 512
[   51.242482][ T1400] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   51.848538][ T1414] device ip6gretap0 left promiscuous mode
[   51.889559][ T1421] Illegal XDP return value 4292268032 on prog  (id 55) dev N/A, expect packet loss!
[   52.071505][   T28] kauditd_printk_skb: 27 callbacks suppressed
[   52.071523][   T28] audit: type=1326 audit(1794287053.713:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1399 comm="syz.1.380" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f7c87da8f19 code=0x7fc00000
[   52.112513][   T28] audit: type=1400 audit(1794287053.763:407): avc:  denied  { read write } for  pid=1433 comm="syz.1.393" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   52.137260][   T28] audit: type=1400 audit(1794287053.763:408): avc:  denied  { open } for  pid=1433 comm="syz.1.393" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   52.387173][  T307] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   52.578358][  T307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   52.589440][  T307] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   52.598766][  T307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.610043][  T307] usb 1-1: config 0 descriptor??
[   52.877336][   T28] audit: type=1400 audit(1794287054.533:409): avc:  denied  { write } for  pid=1458 comm="syz.2.401" path="socket:[23770]" dev="sockfs" ino=23770 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   52.925604][ T1465] 9pnet_fd: Insufficient options for proto=fd
[   53.018526][  T307] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor
[   53.038765][  T307] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0004/input/input5
[   53.130695][   T28] audit: type=1400 audit(1794287054.783:410): avc:  denied  { read } for  pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=714 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   53.154506][  T307] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[   53.187182][   T28] audit: type=1400 audit(1794287054.783:411): avc:  denied  { open } for  pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=714 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   53.257517][   T28] audit: type=1400 audit(1794287054.783:412): avc:  denied  { ioctl } for  pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=714 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   53.401936][   T28] audit: type=1400 audit(1794287055.053:413): avc:  denied  { read } for  pid=1487 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   53.467653][ T1495] bridge1: port 1(veth3) entered blocking state
[   53.474029][ T1495] bridge1: port 1(veth3) entered disabled state
[   53.481124][ T1495] device veth3 entered promiscuous mode
[   53.561806][ T1495] bridge1: port 2(veth0_to_bond) entered blocking state
[   53.587203][ T1495] bridge1: port 2(veth0_to_bond) entered disabled state
[   53.594921][ T1495] device veth0_to_bond entered promiscuous mode
[   53.601761][   T28] audit: type=1326 audit(1794287055.253:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1488 comm="syz.4.411" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1efa8f19 code=0x7fc00000
[   53.612800][  T682] usb 1-1: USB disconnect, device number 3
Stopping sshd: [   53.736657][   T28] audit: type=1400 audit(1794287055.383:415): avc:  denied  { wake_alarm } for  pid=1510 comm="syz.1.415" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
stopped /usr/sbin/sshd (pid 193)
OK
Stopping crond: stopped /usr/sbin/crond (pid 186)
OK
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 140)
Stopping network: OK
Stopping iptables: [   54.385381][ T1547] __nla_validate_parse: 6 callbacks suppressed
[   54.385399][ T1547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.421'.
OK
[   54.455614][ T1557] loop4: detected capacity change from 0 to 4096
Stopping system message bus: [   54.836797][ T1557] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   55.062339][ T1557] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.425: Failed to acquire dquot type 1
[   55.094116][ T1557] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix.
done
[   55.302700][ T1569] futex_wake_op: syz.2.428 tries to shift op by 144; fix this program
[   55.353515][ T1569] futex_wake_op: syz.2.428 tries to shift op by 144; fix this program
killall: can't kill pid 532: No such process
killall: can't kill pid 558: No such process
killall: can't kill pid 750: No such process
killall: can't kill pid 756: No such process
killall: can't kill pid 1481: No such process
Stopping klogd: OK
Stopping acpid: [   55.648214][ T1498] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.658839][ T1498] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.884053][ T1588] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.895548][ T1588] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.909803][ T1588] device bridge_slave_0 entered promiscuous mode
[   55.925714][ T1588] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.939579][ T1588] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.952691][ T1588] device bridge_slave_1 entered promiscuous mode
[   56.103335][ T1588] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.110457][ T1588] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.117863][ T1588] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.124916][ T1588] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.157498][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.175779][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.186093][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.210974][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   56.224242][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   56.238087][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.245266][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.268699][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   56.285931][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   56.294800][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.301902][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.319841][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.328818][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.346844][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.356137][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.369652][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   56.378393][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.390765][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   56.399138][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.407797][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   56.415388][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.424673][ T1588] device veth0_vlan entered promiscuous mode
[   56.437262][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   56.445743][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.456587][ T1588] device veth1_macvtap entered promiscuous mode
[   56.468362][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   56.478662][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   56.486154][ T1615] netlink: 28 bytes leftover after parsing attributes in process `syz.1.439'.
[   56.490818][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   56.505443][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   56.514089][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   56.654526][ T1626] netlink: 'syz.5.442': attribute type 4 has an invalid length.
[   56.666731][ T1626] netlink: 'syz.5.442': attribute type 4 has an invalid length.
OK
[   56.678625][ T1626] netlink: 'syz.5.442': attribute type 4 has an invalid length.
Stopping syslogd: stopped /sbin/syslogd (pid 84)
OK
umount: can't remount debugfs read-only
[   56.918910][ T1644] 9pnet: p9_errstr2errno: server reported unknown error ���#�\,���7��
[   56.918910][ T1644] 
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
Connection to 10.128.0.152 closed by remote host.
Sent SIGTERM to all processes
[   57.272714][ T1641] EXT4-fs (loop4): unmounting filesystem.
[   57.677868][ T1498] device bridge_slave_1 left promiscuous mode
[   57.684113][ T1498] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.691691][ T1498] device bridge_slave_0 left promiscuous mode
[   57.697939][ T1498] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.706082][ T1498] device veth1_macvtap left promiscuous mode
[   57.712166][ T1498] device veth0_vlan left promiscuous mode
Sent SIGKILL to all processes
Requesting system poweroff
[   58.558534][ T1498] device bridge_slave_1 left promiscuous mode
[   58.564770][ T1498] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.572272][ T1498] device bridge_slave_0 left promiscuous mode
[   58.578458][ T1498] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.586270][ T1498] device bridge_slave_1 left promiscuous mode
[   58.592461][ T1498] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.599835][ T1498] device bridge_slave_0 left promiscuous mode
[   58.605940][ T1498] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.613821][ T1498] device bridge_slave_1 left promiscuous mode
[   58.620114][ T1498] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.627543][ T1498] device bridge_slave_0 left promiscuous mode
[   58.633642][ T1498] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.641492][ T1498] device veth0_to_bond left promiscuous mode
[   58.647573][ T1498] bridge1: port 2(veth0_to_bond) entered disabled state
[   58.654849][ T1498] device veth3 left promiscuous mode
[   58.660297][ T1498] bridge1: port 1(veth3) entered disabled state
[   58.667778][ T1498] device bridge_slave_1 left promiscuous mode
[   58.673982][ T1498] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.681559][ T1498] device bridge_slave_0 left promiscuous mode
[   58.687793][ T1498] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.696200][ T1498] device veth1_macvtap left promiscuous mode
[   58.702288][ T1498] device veth0_vlan left promiscuous mode
[   58.708546][ T1498] device veth1_macvtap left promiscuous mode
[   58.714573][ T1498] device veth0_vlan left promiscuous mode
[   58.720745][ T1498] device veth1_macvtap left promiscuous mode
[   58.726757][ T1498] device veth0_vlan left promiscuous mode
[   59.039272][ T1645] kvm: exiting hardware virtualization
[   59.045554][ T1645] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[   59.052493][ T1645] ACPI: PM: Preparing to enter system sleep state S5
[   59.067218][ T1645] reboot: Power down
serialport: VM disconnected.