last executing test programs:

2m4.863448931s ago: executing program 32 (id=434):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000"], 0x50)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="18120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000b704000000000000850000003400000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r1}, 0x20)
write(r1, &(0x7f0000000700)='h', 0x1)

1m43.784695492s ago: executing program 33 (id=1494):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400b59527bd7000ffdbdf250a1700ff", @ANYRES32=r4, @ANYBLOB="14000200fef8e53f3800000000000000000000bb140006007f0000004a09"], 0x40}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0)
sendmsg$nl_route(r0, 0x0, 0x40000)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

1m35.563061621s ago: executing program 34 (id=1813):
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, &(0x7f00000001c0)=[{0xfffffffffffffffc}], 0x1, 0x237, 0x0, 0x2, 0x0, 0x40})

1m35.016058876s ago: executing program 35 (id=1833):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = syz_io_uring_setup(0x6ee1, &(0x7f0000000040)={0x0, 0x3fa4, 0x12, 0x2, 0x13a}, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000000))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0)=[0x4, 0x4300], 0x2)

1m22.030700721s ago: executing program 5 (id=2462):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)="8c", 0x1)

1m22.022823432s ago: executing program 5 (id=2463):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="03fc0300145f02002000128008000100677470001400028008000200af2544e7e1c29e90df587a0abb3900f3d81e049cbc120f997d02a19139693e9b7065a91298a5190ed2ec9c46de79128df4360b975220ccfaaee3f4e4c2a38a115e1179040040ac6dccfbd609f992cd8585ad69c100fb876cbe46f1abcbd4a643055f5e7670c5d67baa13"], 0x40}, 0x1, 0x0, 0x0, 0x14044080}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xf642, 0x20, 0x6, 0x9dfe, 0x11})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17)

1m21.925777452s ago: executing program 5 (id=2464):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m21.925583382s ago: executing program 5 (id=2465):
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

1m21.924713172s ago: executing program 5 (id=2466):
r0 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x14f882)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
r2 = syz_open_dev$loop(&(0x7f0000002500), 0x10000000009, 0xd18135cf551e1a3d)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000001c0)={r0, 0x7ffd, {0x2a12, 0x80010000, 0x0, 0x4, 0x4, 0x0, 0x0, 0xd, 0xf, "0500000000860600d1f8a0e91dd2aca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061acfc3fdc15dfb8ea28000000000400", "90be8b1c55f9640000000000000000000000000002000000efffffffff11e4ff", [0x802]}})

1m21.735737451s ago: executing program 5 (id=2471):
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000003640))
statx(0xffffffffffffffff, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, 0x10, &(0x7f0000003900))
fchown(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000003bc0)={0x2020}, 0x2020)
getresgid(0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x5)
unshare(0x2020600)
setsockopt$inet6_int(r0, 0x29, 0x7, 0x0, 0x0)

1m21.735591131s ago: executing program 36 (id=2471):
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000003640))
statx(0xffffffffffffffff, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, 0x10, &(0x7f0000003900))
fchown(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000003bc0)={0x2020}, 0x2020)
getresgid(0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x5)
unshare(0x2020600)
setsockopt$inet6_int(r0, 0x29, 0x7, 0x0, 0x0)

1m7.44127462s ago: executing program 0 (id=3094):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
msync(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x4)

1m7.400885444s ago: executing program 0 (id=3098):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, 0x0)

1m7.400535854s ago: executing program 0 (id=3100):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
madvise(&(0x7f0000036000/0x4000)=nil, 0x4000, 0x64)

1m7.203702324s ago: executing program 0 (id=3107):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = inotify_init1(0x80800)
inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x44000160)
open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
readv(r0, &(0x7f0000003400)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1)

1m7.203423154s ago: executing program 0 (id=3108):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xffffbd59, 0x0, 0x8, 0x40})
setpriority(0x1, 0x0, 0x2)

1m7.194341605s ago: executing program 0 (id=3110):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00')
r2 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832})
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x444, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

1m3.703363731s ago: executing program 8 (id=3261):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m3.702971541s ago: executing program 8 (id=3264):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xa, 0x5, 0x0, 0x5, 0x0, 0x6, 0xb, 0xff, 0x4, 0x1, 0x3, 0x0, 0x1, 0x5, 0x28, 0x2, 0x4, 0xff, '\x00', 0x1, 0xef})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x4, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x2, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x3, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0x8000000, 0x3, 0x1, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0xe, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x9}, {0x10000, 0xdddd1000, 0xa, 0x7, 0x0, 0x0, 0x7, 0x20, 0x0, 0x3}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000000, 0x0, 0xfffffdffffffffff, 0xfffffffeffffffff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m3.541011608s ago: executing program 8 (id=3280):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x52)

1m3.507964901s ago: executing program 8 (id=3284):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0)
mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0)

1m3.507781781s ago: executing program 8 (id=3286):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0))
r1 = syz_open_pts(r0, 0x101000)
ioctl$TIOCSBRK(r1, 0x5427)

1m3.481840924s ago: executing program 8 (id=3289):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0xffe0, 0xb}, {0xb, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80000)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2c099, 0x4400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e26}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m3.460987906s ago: executing program 37 (id=3289):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0xffe0, 0xb}, {0xb, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80000)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2c099, 0x4400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e26}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

52.040616141s ago: executing program 38 (id=3110):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00')
r2 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832})
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x444, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

39.11409547s ago: executing program 2 (id=4327):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0xfffffe14)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x1, 0xffff, 0x0, 0x3ff, 0x0, 0x0, 0x80, 0x8001}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffb, 0x0, 0x8, 0xfffffffc, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r2, 0x1001, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1)
dup3(r0, r3, 0x6700000000000000)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)

38.856408996s ago: executing program 2 (id=4338):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000140)=@framed={{}, [@generic={0x71, 0x2, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0xac, &(0x7f0000000000)=""/172, 0x0, 0x4, '\x00', 0x0, 0xd}, 0x94)

38.804772881s ago: executing program 2 (id=4342):
r0 = syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_pidfd_open(r0, 0x0)
syz_pidfd_open(r0, 0x0)

38.145082489s ago: executing program 2 (id=4386):
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$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")
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00')
read$FUSE(r0, &(0x7f0000001000)={0x2020, 0x0, 0x0, <r1=>0x0}, 0x2020)
setuid(r1)
r2 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00')
fchdir(r3)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
r4 = syz_open_procfs(r2, &(0x7f0000000100)='map_files\x00')
fchdir(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88)
getdents64(r5, &(0x7f0000002f80)=""/145, 0x91)

38.011719322s ago: executing program 2 (id=4392):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2001026, 0x0)

37.461959278s ago: executing program 2 (id=4417):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

37.427694752s ago: executing program 39 (id=4417):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

34.639461776s ago: executing program 4 (id=4517):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000040))
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x10, 0x4, 0x0, 0x0, @sint={0x0, 0x800}}]})
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000140)={0x10, 0x1})

34.552314215s ago: executing program 4 (id=4519):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x81, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)

34.302787741s ago: executing program 4 (id=4524):
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d"], 0xac}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80900, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}}, 0x4008000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

34.163900615s ago: executing program 4 (id=4533):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b4, &(0x7f0000000280)="$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")
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
wait4(r0, 0x0, 0x8, 0x0)
ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98})
ptrace$setregset(0x4205, r0, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60})

34.067402805s ago: executing program 4 (id=4538):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)

33.995422232s ago: executing program 4 (id=4539):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x297, 0x0, 0x4}]})

33.890210613s ago: executing program 40 (id=4539):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x297, 0x0, 0x4}]})

16.416784176s ago: executing program 6 (id=5272):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

16.416244366s ago: executing program 6 (id=5274):
r0 = fsopen(&(0x7f0000000080)='fuse\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000000b40)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>\xbcc\x84\xfe\xb3hOB\xdc4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcf\xcb\x92\xf1\x83\x1a1\xa6\xf3e\xc2F\xc3\x00i\x1e\x00\x00\x00\x00\x00\x00&\x9f\xa2$X\xd0\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5keU2\xf3\xe1\xe0\xc5\x15\xdc\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1\x89\x85\x1c46\xebs#\xdf\nk@/\x9d\x00h\xe5\x00HP\xc1_\x0f\x1c\x11\x96\xdb\xb3=uP\xdf\xc9<f\x9eW\x95:\x97\x86\f%\x92\xcb\xe8\x10f$\x0f\xf9\xb4\x16\xda\xaa\x9aR\xabu\xd1E\x1e!\xd3A\xddG\xa5~]\xd2S\x13\xf5>Z\xec\x16\x9e[\xfe\x0f\x15\x81\x9cWC\xd2\x1f\xf0\xf2M24\xc3\x14B\xa7\x05\xd6(/&{\x9fl\x90\xbcM\xa4d\xa5\x8c\xcej\x1czTj\xa1G\xc1\xc4P\x88\"\xb5\xda6d\x04+\xd9\x0fw*FB\xa7\x8d\xfb\x15\rw\xf6c\x8a\xc2\xbeZ\xb2\xe8q\xde\xbe^\x91\x81\x16\x95b\xbad\x90.\x10\xc5e\xa7\xac\x9dQfTi\xdfB\x9b\xc7\x9c\xd7yN2\x83.F\x866\xc6/\xf8d<\x0eA\xf8s\x8b\xc5\x1b\xb9\f\x82', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source', &(0x7f0000000240)='//\xf2/\x06\b\xa30\\\\\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
readv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/92, 0x5c}, {0x0}], 0x2)

16.416081466s ago: executing program 6 (id=5275):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x2019})
ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0xc100}, {r1, 0x4}], 0x2, &(0x7f00000003c0)={0x0, 0x989680}, 0x0, 0x0)

16.405296047s ago: executing program 6 (id=5276):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0xa0000000)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
listen(r6, 0x724)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r8)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0)
writev(r8, &(0x7f0000000180)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)

16.381583789s ago: executing program 6 (id=5277):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f00000001c0)="b9800000c00f3235004000000f30b9fa000000130f01d9300d76c4020a1bf7b805000000b90000c0fe0f3cae0a41d94166b8ea000f00d00f32ba00e500000f30660fc775022e0fba600c9864660ffc76002f3166b85766baa00066ed00d0", 0x5e}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16.313338866s ago: executing program 6 (id=5278):
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="b5"], 0x0, 0x0, &(0x7f0000000200))
mkdir(&(0x7f0000000300)='./file1/my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./file1/my_sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file1/my_sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file1/my_sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0)
write(r1, &(0x7f0000000c00)='1', 0x1)
writev(r0, &(0x7f0000002140)=[{&(0x7f0000001140)="cbab3ce1eb2f417ae2eaab8eb923d3cad3f4d1fcaa25d7fa2c4c2703b0eeb46943ce4fa56e7ad088b8447ca071674e32e128c2e08a4acbca87cbddee9e9d8c3560ffc7cd7fd6a06fe3239baedeba25ccc5a68aef75a0c27554c9f0b51868075a974f3e21f3ec26e5dfb3830700fd397cb05eb01944ce60c72a1c4ed10009b8f81df14398b67fb11012bdaec78bee690d897bb4efc07de8666421e293", 0x9c}], 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./file1/my_sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r2, &(0x7f0000000e00)='1', 0x1)

15.513184897s ago: executing program 3 (id=5292):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0)
write$P9_RLERRORu(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="de49f24109", @ANYRESHEX], 0xd)

15.503728749s ago: executing program 3 (id=5293):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x200000d, 0x4082172, 0xffffffffffffffff, 0x202db000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f00000000c0))

15.496319389s ago: executing program 3 (id=5294):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_mnt/kernel/mm/transparent_hugepage/enabled\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='always', 0x6)
mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
sendfile(r1, r2, 0x0, 0x7)

15.48682996s ago: executing program 3 (id=5295):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2acd0da, 0x0)
unshare(0x26020400)
pivot_root(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00')

15.477710461s ago: executing program 3 (id=5296):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000b40)={0x28, r0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x4)

15.183692471s ago: executing program 3 (id=5297):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x241, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000180)={0x8002, 0x0, [{0x9, 0x0, 0x7ff}, {0xfff, 0x0, 0x2}, {0x81, 0x0, 0x9}, {0x7, 0x0, 0x5d5}, {0x8, 0x0, 0x9a7}, {0x1b1b9793, 0x0, 0x4}, {0xfff, 0x0, 0x3}, {0x8000, 0x0, 0x8001}, {0x3fe80c5d, 0x0, 0x101}, {0xd, 0x0, 0x5}, {0x9, 0x0, 0x13b}, {0x6dc8, 0x0, 0x8}, {0x8, 0x0, 0x5}, {0xfffffff9, 0x0, 0x4}, {0x6}, {0xd284, 0x0, 0x8000}]})

15.183508381s ago: executing program 41 (id=5297):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x241, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000180)={0x8002, 0x0, [{0x9, 0x0, 0x7ff}, {0xfff, 0x0, 0x2}, {0x81, 0x0, 0x9}, {0x7, 0x0, 0x5d5}, {0x8, 0x0, 0x9a7}, {0x1b1b9793, 0x0, 0x4}, {0xfff, 0x0, 0x3}, {0x8000, 0x0, 0x8001}, {0x3fe80c5d, 0x0, 0x101}, {0xd, 0x0, 0x5}, {0x9, 0x0, 0x13b}, {0x6dc8, 0x0, 0x8}, {0x8, 0x0, 0x5}, {0xfffffff9, 0x0, 0x4}, {0x6}, {0xd284, 0x0, 0x8000}]})

7.792818905s ago: executing program 7 (id=5320):
socket(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
close(0xffffffffffffffff)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r0, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57", 0x46, 0x800, 0x0, 0x0)

6.484590958s ago: executing program 1 (id=5321):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
close_range(r0, r0, 0x200000000000000)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00fc35dd654ced169597090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000", 0x58}], 0x1)

6.483863619s ago: executing program 9 (id=5322):
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000018a000/0x4000)=nil, 0x4000}, 0x2})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000000, 0x10031, 0xffffffffffffffff, 0xbe9f6000)

6.483537679s ago: executing program 7 (id=5323):
r0 = socket(0xa, 0x2400000001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x4e24, 0xffffffc0, @mcast2, 0x22}}}, 0x88)
openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fd, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x8)
syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000001000/0x400000)=nil)
getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90)

5.006372529s ago: executing program 1 (id=5324):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd(0x8000)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x5, 0x2, r2})
read$eventfd(r2, &(0x7f0000000100), 0x8)

4.987437342s ago: executing program 9 (id=5325):
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/pci/devices/0000:00:07.0/subsystem_device\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/devices/0000:00:07.0/class\x00', 0x0, 0x0)
read(0xffffffffffffffff, &(0x7f0000000000)=""/256, 0x100)
read(r0, &(0x7f0000000100)=""/256, 0x100)
read(r1, 0x0, 0x0)

4.985384762s ago: executing program 7 (id=5326):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e22, 0x2, @local, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00)
close(0x3)

3.451159638s ago: executing program 1 (id=5327):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TXQLEN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000006140)={@local, @local, @void, {@ipv6}}, 0x0)

3.450758148s ago: executing program 9 (id=5328):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffffc4010440, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x40000}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2e4c77b8c9cd5f70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d38100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x100000000000084, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x28)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1)
umount2(&(0x7f0000000380)='./file0\x00', 0x1)

3.450459298s ago: executing program 7 (id=5329):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x4, 0x1, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}]}]}, 0xcc}}, 0x0)

1.837212853s ago: executing program 1 (id=5330):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @link_local}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10)

1.836183613s ago: executing program 9 (id=5331):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0xf000, 0xc, 0xeb, 0x2, 0x0, 0x0, 0x0, 0x7, 0x7}, {0xeeee0000, 0x1000, 0x9, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x45, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x1, 0x0, 0x9, 0xff, 0x3, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x3c}, {0xffff1000, 0x0, 0x0, 0x78, 0x5, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x7}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20}, {0x0, 0x6000, 0x8, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0xdddd1000, 0xfffd}, 0x5df9ffdc, 0x0, 0x0, 0x120, 0x0, 0xf801, 0x41000, [0x80000001, 0x0, 0x1, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0xffffffff, 0x10, 0x3, 0x2, 0x0, 0x0, 0x0, 0x3, 0xff}, {0x2000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0xfe, 0x4}, {0x6000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x4, 0x0, 0xb, 0x78, 0x5, 0x80, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x0, 0x3333d000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8, 0xfc}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x23, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x114, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x7]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.835831993s ago: executing program 7 (id=5332):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x19, {0x0, "f4"}}], 0x31})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300))

121.098858ms ago: executing program 42 (id=5278):
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="b5"], 0x0, 0x0, &(0x7f0000000200))
mkdir(&(0x7f0000000300)='./file1/my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./file1/my_sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file1/my_sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file1/my_sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0)
write(r1, &(0x7f0000000c00)='1', 0x1)
writev(r0, &(0x7f0000002140)=[{&(0x7f0000001140)="cbab3ce1eb2f417ae2eaab8eb923d3cad3f4d1fcaa25d7fa2c4c2703b0eeb46943ce4fa56e7ad088b8447ca071674e32e128c2e08a4acbca87cbddee9e9d8c3560ffc7cd7fd6a06fe3239baedeba25ccc5a68aef75a0c27554c9f0b51868075a974f3e21f3ec26e5dfb3830700fd397cb05eb01944ce60c72a1c4ed10009b8f81df14398b67fb11012bdaec78bee690d897bb4efc07de8666421e293", 0x9c}], 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./file1/my_sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r2, &(0x7f0000000e00)='1', 0x1)

118.513098ms ago: executing program 1 (id=5334):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4)
shutdown(r0, 0x1)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/160, 0xa0, 0x1, 0x0}, &(0x7f00000003c0)=0x40)

117.440368ms ago: executing program 9 (id=5335):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='debugfs\x00', &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0)
write(r0, &(0x7f0000000000)='N\x00', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/cache-filter\x00', 0x1, 0x0)
write(r1, &(0x7f0000000000)='N\x00', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0)
write(r2, &(0x7f0000000000)='N\x00', 0x1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)

116.550538ms ago: executing program 7 (id=5336):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40})
ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0xb, 0x7ffefffffffffff9, 0x10, 0x8010000, 0xa, 0x400000000000005, 0x2, 0xffffffffac1c1a80, 0x772b, 0x7ffffffffffffffc, 0x1, 0xffffffffffff9867, 0x0, 0x1, 0x3, 0x2002], 0x0, 0x112840})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

89.208101ms ago: executing program 1 (id=5337):
r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0xb, 0xffffffffffffffff, 0x1})

0s ago: executing program 9 (id=5338):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000200)=[@window={0x3, 0x3, 0x1}, @sack_perm, @window={0x3, 0x3, 0x100}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x7}, @mss={0x2, 0x27f}, @sack_perm, @window={0x3, 0x3, 0x8}], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000300)="51289c001e00cca9072e1f21dc867f59d038a0f9dc5b491af28acb49ed57cb078a3854ba6868de75dc4dd4d6a6a2d4a93d08d65b9b9d4c1909c16ea574ed6c7f963425e749ef6246edeed157020743116d90c2b00900859863e1c07ab839fb7830ecd04df21f1356b0ad0d9b157d22bcf0", 0x9d0aeebe0bd281d3, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

kernel console output (not intermixed with test programs):

 82.133579][ T5566] FAT-fs (loop8): Directory bread(block 73) failed
[   82.157722][  T367] kernel write not supported for file bpf-prog (pid: 367 comm: kworker/0:4)
[   82.368340][ T5611] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[   82.407268][ T5617] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.414560][ T5617] IPv6: NLM_F_CREATE should be set when creating new route
[   82.432383][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.439597][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.665741][ T5647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2300'.
[   82.688104][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   82.698347][ T5655] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2304'.
[   82.911830][ T5679] device syzkaller0 entered promiscuous mode
[   83.014178][ T5686] tmpfs: Too small a size for current use
[   83.195764][ T5711] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(4.181.0), cmd(0)
[   83.460519][ T5760] loop0: detected capacity change from 0 to 256
[   83.471568][ T5760] FAT-fs (loop0): Directory bread(block 64) failed
[   83.478550][ T5760] FAT-fs (loop0): Directory bread(block 65) failed
[   83.485467][ T5760] FAT-fs (loop0): Directory bread(block 66) failed
[   83.492009][ T5760] FAT-fs (loop0): Directory bread(block 67) failed
[   83.510676][ T5760] FAT-fs (loop0): Directory bread(block 68) failed
[   83.527732][ T5760] FAT-fs (loop0): Directory bread(block 69) failed
[   83.535218][ T5760] FAT-fs (loop0): Directory bread(block 70) failed
[   83.541887][ T5760] FAT-fs (loop0): Directory bread(block 71) failed
[   83.548527][ T5760] FAT-fs (loop0): Directory bread(block 72) failed
[   83.555133][ T5760] FAT-fs (loop0): Directory bread(block 73) failed
[   83.643708][ T5789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2362'.
[   83.710609][ T5793] loop5: detected capacity change from 0 to 256
[   83.718290][ T5793] FAT-fs (loop5): Unrecognized mount option "snt" or missing value
[   83.910870][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.976189][ T5842] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   83.998117][ T5842] device veth0_vlan left promiscuous mode
[   84.004337][ T5842] device veth0_vlan entered promiscuous mode
[   84.011975][ T5842] device veth1_macvtap left promiscuous mode
[   84.018915][ T5842] device veth1_macvtap entered promiscuous mode
[   84.026483][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   84.034046][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   84.041566][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   84.050107][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.057175][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.065002][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   84.074449][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   84.083692][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.090713][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.098637][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   84.106976][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   84.115063][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   84.123153][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   84.131129][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   84.139289][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   84.147374][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   84.155594][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   84.163609][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   84.171641][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   84.179639][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   84.187640][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   84.195622][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   84.203617][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   84.211879][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   84.220198][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   84.228316][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   84.236229][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   84.243607][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   84.250968][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   84.259164][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   84.267282][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   84.277288][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   84.323662][ T5854] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   84.418124][ T5862] __nla_validate_parse: 1 callbacks suppressed
[   84.418141][ T5862] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2395'.
[   84.623783][ T5893] FAULT_INJECTION: forcing a failure.
[   84.623783][ T5893] name fail_futex, interval 1, probability 0, space 0, times 0
[   84.636757][ T5893] CPU: 0 PID: 5893 Comm: syz.5.2409 Not tainted syzkaller #0
[   84.644129][ T5893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   84.654196][ T5893] Call Trace:
[   84.657468][ T5893]  <TASK>
[   84.660404][ T5893]  __dump_stack+0x21/0x24
[   84.664735][ T5893]  dump_stack_lvl+0x110/0x170
[   84.669401][ T5893]  ? __cfi_dump_stack_lvl+0x8/0x8
[   84.674421][ T5893]  ? kasan_set_track+0x60/0x70
[   84.679172][ T5893]  ? kasan_save_alloc_info+0x1f/0x30
[   84.684467][ T5893]  ? __kasan_slab_alloc+0x72/0x80
[   84.689511][ T5893]  ? slab_post_alloc_hook+0x4f/0x2d0
[   84.694786][ T5893]  ? security_file_alloc+0x33/0x130
[   84.699983][ T5893]  dump_stack+0x15/0x24
[   84.704147][ T5893]  should_fail_ex+0x3bf/0x510
[   84.708835][ T5893]  should_fail+0xb/0x10
[   84.713049][ T5893]  get_futex_key+0x143/0xb10
[   84.717660][ T5893]  ? __cfi_get_futex_key+0x10/0x10
[   84.722799][ T5893]  futex_wake+0x150/0x8e0
[   84.727138][ T5893]  ? kasan_save_alloc_info+0x1f/0x30
[   84.732410][ T5893]  ? __cfi_futex_wake+0x10/0x10
[   84.737278][ T5893]  ? security_file_alloc+0x33/0x130
[   84.742476][ T5893]  do_futex+0x2bf/0x430
[   84.746627][ T5893]  ? alloc_file+0x82/0x600
[   84.751026][ T5893]  ? __cfi_do_futex+0x10/0x10
[   84.755686][ T5893]  __se_sys_futex+0x136/0x310
[   84.760358][ T5893]  ? __x64_sys_futex+0x100/0x100
[   84.765282][ T5893]  __x64_sys_futex+0xe5/0x100
[   84.769943][ T5893]  x64_sys_call+0x7ec/0x9a0
[   84.774431][ T5893]  do_syscall_64+0x4c/0xa0
[   84.778826][ T5893]  ? clear_bhb_loop+0x30/0x80
[   84.783485][ T5893]  ? clear_bhb_loop+0x30/0x80
[   84.788168][ T5893]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   84.794054][ T5893] RIP: 0033:0x7fe77dd9f559
[   84.798461][ T5893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   84.818062][ T5893] RSP: 002b:00007fe77ebba0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   84.826466][ T5893] RAX: ffffffffffffffda RBX: 00007fe77e025fa8 RCX: 00007fe77dd9f559
[   84.834432][ T5893] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe77e025fac
[   84.842398][ T5893] RBP: 00007fe77e025fa0 R08: 0023833e11ac2900 R09: 0000000000000000
[   84.850385][ T5893] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000
[   84.858627][ T5893] R13: 00007fe77e026038 R14: 00007ffd79fb7250 R15: 00007ffd79fb7338
[   84.866591][ T5893]  </TASK>
[   84.951593][ T5916] loop2: detected capacity change from 0 to 8
[   84.958808][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   84.968028][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   84.976234][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   84.985417][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   84.993255][  T394]  loop2: unable to read partition table
[   84.999677][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.008823][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   85.016858][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.026014][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   85.033849][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 2 prio class 2
[   85.033860][ T5916]  loop2: unable to read partition table
[   85.033938][ T5916] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[   85.049218][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.071565][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   85.080006][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.081101][ T5922] netlink: 'syz.5.2422': attribute type 1 has an invalid length.
[   85.089195][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   85.105205][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.114377][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   85.124787][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.133975][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   85.142474][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.151622][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   85.200152][ T5938] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2429'.
[   85.224369][ T5938] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2429'.
[   85.227504][ T5941] loop0: detected capacity change from 0 to 512
[   85.246815][ T5941] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   85.396616][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2441'.
[   85.490563][ T5969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2443'.
[   85.636632][ T5981] netlink: 'syz.5.2448': attribute type 4 has an invalid length.
[   85.644509][ T5981] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2448'.
[   86.361586][   T28] kauditd_printk_skb: 14 callbacks suppressed
[   86.361600][   T28] audit: type=1400 audit(1793272996.255:443): avc:  denied  { module_request } for  pid=6035 comm="syz-executor" kmod="netdev-nr9" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   86.443113][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.450226][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.457976][ T6035] device bridge_slave_0 entered promiscuous mode
[   86.465202][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.472244][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.481648][ T6035] device bridge_slave_1 entered promiscuous mode
[   86.499817][ T6047] device syzkaller0 entered promiscuous mode
[   86.537244][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.544323][ T6035] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.551595][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.558632][ T6035] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.582560][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   86.591526][  T365] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.599744][  T365] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.624451][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   86.634933][  T365] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.641995][  T365] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.650584][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   86.660037][  T365] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.667138][  T365] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.692019][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   86.700667][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   86.713201][ T6068] device syzkaller0 entered promiscuous mode
[   86.726436][ T6035] device veth0_vlan entered promiscuous mode
[   86.732928][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   86.741595][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   86.750435][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   86.758871][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   86.774187][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.781292][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.820482][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   86.830348][ T6035] device veth1_macvtap entered promiscuous mode
[   86.841276][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   86.855216][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   86.875728][   T28] audit: type=1326 audit(1793272996.775:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6082 comm="syz.7.2494" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f739f559 code=0x7ffc0000
[   86.912149][   T28] audit: type=1326 audit(1793272996.775:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6082 comm="syz.7.2494" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f739f559 code=0x7ffc0000
[   86.947342][   T28] audit: type=1326 audit(1793272996.775:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6082 comm="syz.7.2494" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f739f559 code=0x7ffc0000
[   86.996118][   T28] audit: type=1326 audit(1793272996.775:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6082 comm="syz.7.2494" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f739f559 code=0x7ffc0000
[   87.059494][   T28] audit: type=1326 audit(1793272996.775:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6082 comm="syz.7.2494" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f40f739f559 code=0x7ffc0000
[   87.105222][   T28] audit: type=1326 audit(1793272996.775:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6082 comm="syz.7.2494" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f739f559 code=0x7ffc0000
[   87.130038][   T28] audit: type=1326 audit(1793272996.775:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6082 comm="syz.7.2494" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f739f559 code=0x7ffc0000
[   87.155310][   T28] audit: type=1326 audit(1793272996.775:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6082 comm="syz.7.2494" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f40f739f559 code=0x7ffc0000
[   87.180876][   T28] audit: type=1326 audit(1793272996.775:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6082 comm="syz.7.2494" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f40f739f559 code=0x7ffc0000
[   87.415014][ T6155] 9pnet_fd: p9_fd_create_unix (6155): problem connecting socket: ./file0: -13
[   87.440981][ T6169] device syzkaller0 entered promiscuous mode
[   87.603208][ T6204] device syzkaller0 entered promiscuous mode
[   91.002248][ T6249] device syzkaller0 entered promiscuous mode
[   91.053457][ T6263] loop7: detected capacity change from 0 to 128
[   91.066060][ T6263] syz.7.2570: attempt to access beyond end of device
[   91.066060][ T6263] loop7: rw=2049, sector=138, nr_sectors = 6 limit=128
[   91.096419][ T6267] overlayfs: failed to clone upperpath
[   91.140063][ T6273] xt_hashlimit: size too large, truncated to 1048576
[   91.169651][ T6282] overlayfs: failed to clone lowerpath
[   91.178477][ T6282] overlayfs: failed to clone lowerpath
[   91.299688][ T6309] fuse: Bad value for 'fd'
[   91.372313][   T28] kauditd_printk_skb: 18 callbacks suppressed
[   91.372326][   T28] audit: type=1400 audit(1793273001.265:471): avc:  denied  { read write } for  pid=6320 comm="syz.7.2596" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   91.407175][   T28] audit: type=1400 audit(1793273001.265:472): avc:  denied  { open } for  pid=6320 comm="syz.7.2596" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   91.408419][ T6325] loop7: detected capacity change from 0 to 256
[   91.450236][ T6327] fuse: Bad value for 'fd'
[   91.459573][ T6325] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   91.553285][ T6325] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779264)
[   91.562972][ T6325] FAT-fs (loop7): Filesystem has been set read-only
[   91.569851][ T6325] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008)
[   91.578031][ T6325] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008)
[   91.821527][   T28] audit: type=1400 audit(1793273001.715:473): avc:  denied  { remount } for  pid=6366 comm="syz.7.2618" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   91.843658][ T6371] fuse: Bad value for 'fd'
[   91.911919][   T28] audit: type=1400 audit(1793273001.805:474): avc:  denied  { append } for  pid=6379 comm="syz.9.2632" name="file0" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   91.940261][ T6382] overlayfs: failed to clone upperpath
[   92.113181][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2636'.
[   92.140431][ T6423] netlink: 'syz.8.2643': attribute type 3 has an invalid length.
[   92.148375][ T6423] netlink: 'syz.8.2643': attribute type 3 has an invalid length.
[   92.218539][   T28] audit: type=1400 audit(1793273002.115:475): avc:  denied  { write } for  pid=6446 comm="syz.8.2654" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[   92.373157][ T6470] loop0: detected capacity change from 0 to 512
[   92.715013][ T6499] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2674'.
[   92.884936][ T6522] loop7: detected capacity change from 0 to 512
[   92.916215][ T6524] loop5: detected capacity change from 0 to 7
[   93.032620][ T6543] 9pnet_fd: Insufficient options for proto=fd
[   93.251232][ T6590] device syzkaller0 entered promiscuous mode
[   93.345581][ T6612] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82
[   93.429769][ T6635] device syzkaller0 entered promiscuous mode
[   93.620592][ T6661] /dev/loop0: Can't open blockdev
[   93.769601][ T6688] 9p: Unknown access argument 18446744073709551615: -34
[   93.785712][ T6690] device syzkaller0 entered promiscuous mode
[   94.218324][   T28] audit: type=1400 audit(1793273004.115:476): avc:  denied  { remount } for  pid=6732 comm="syz.1.2780" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   94.267391][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2784'.
[   94.288539][ T6745] loop7: detected capacity change from 0 to 512
[   94.465140][   T28] audit: type=1400 audit(1793273004.365:477): avc:  denied  { map } for  pid=6765 comm="syz.7.2794" path="socket:[51737]" dev="sockfs" ino=51737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[   95.246812][ T6807] loop0: detected capacity change from 0 to 128
[   95.258214][ T6809] FAULT_INJECTION: forcing a failure.
[   95.258214][ T6809] name failslab, interval 1, probability 0, space 0, times 0
[   95.272141][ T6809] CPU: 1 PID: 6809 Comm: syz.1.2814 Not tainted syzkaller #0
[   95.279555][ T6809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   95.289598][ T6809] Call Trace:
[   95.292870][ T6809]  <TASK>
[   95.295798][ T6809]  __dump_stack+0x21/0x24
[   95.300123][ T6809]  dump_stack_lvl+0x110/0x170
[   95.304787][ T6809]  ? __cfi_dump_stack_lvl+0x8/0x8
[   95.309792][ T6809]  ? kasan_set_track+0x60/0x70
[   95.314542][ T6809]  ? kasan_set_track+0x4b/0x70
[   95.319294][ T6809]  ? kasan_save_alloc_info+0x1f/0x30
[   95.324561][ T6809]  ? __kasan_kmalloc+0x95/0xb0
[   95.329315][ T6809]  dump_stack+0x15/0x24
[   95.333456][ T6809]  should_fail_ex+0x3bf/0x510
[   95.338119][ T6809]  __should_failslab+0xac/0xf0
[   95.342875][ T6809]  should_failslab+0x9/0x20
[   95.347363][ T6809]  slab_pre_alloc_hook+0x30/0x1d0
[   95.352383][ T6809]  kmem_cache_alloc_lru+0x49/0x280
[   95.357485][ T6809]  ? __d_alloc+0x34/0x6d0
[   95.361813][ T6809]  __d_alloc+0x34/0x6d0
[   95.365967][ T6809]  d_alloc_pseudo+0x1d/0x70
[   95.370464][ T6809]  alloc_file_pseudo+0xe0/0x200
[   95.375304][ T6809]  ? __cfi_alloc_file_pseudo+0x10/0x10
[   95.380757][ T6809]  ? __cfi_current_time+0x10/0x10
[   95.385768][ T6809]  ? memset+0x35/0x40
[   95.389736][ T6809]  ? create_pipe_files+0x299/0x6c0
[   95.394841][ T6809]  ? memcpy+0x56/0x70
[   95.398809][ T6809]  create_pipe_files+0x2e3/0x6c0
[   95.403738][ T6809]  __do_pipe_flags+0x4f/0x200
[   95.408403][ T6809]  do_pipe2+0xa7/0x190
[   95.412452][ T6809]  ? __this_cpu_preempt_check+0x13/0x20
[   95.417993][ T6809]  ? pipe_fcntl+0x510/0x510
[   95.422480][ T6809]  ? fpregs_restore_userregs+0x128/0x260
[   95.428101][ T6809]  __x64_sys_pipe2+0x5a/0x70
[   95.432672][ T6809]  x64_sys_call+0x258/0x9a0
[   95.437164][ T6809]  do_syscall_64+0x4c/0xa0
[   95.441563][ T6809]  ? clear_bhb_loop+0x30/0x80
[   95.446227][ T6809]  ? clear_bhb_loop+0x30/0x80
[   95.450890][ T6809]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   95.456767][ T6809] RIP: 0033:0x7fc25459f559
[   95.461167][ T6809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.480761][ T6809] RSP: 002b:00007fc2553ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125
[   95.489161][ T6809] RAX: ffffffffffffffda RBX: 00007fc254825fa0 RCX: 00007fc25459f559
[   95.497120][ T6809] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   95.505077][ T6809] RBP: 00007fc254636b20 R08: 0000000000000000 R09: 0000000000000000
[   95.513031][ T6809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.520986][ T6809] R13: 00007fc254826038 R14: 00007fc254825fa0 R15: 00007ffd17f8ead8
[   95.528950][ T6809]  </TASK>
[   95.661798][   T28] audit: type=1400 audit(1793273005.555:478): avc:  denied  { nlmsg_read } for  pid=6848 comm="syz.9.2832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   95.841777][ T6894] device ip6gre1 entered promiscuous mode
[   95.848534][ T6894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   95.913915][ T6921] netlink: 'syz.0.2866': attribute type 11 has an invalid length.
[   95.921966][ T6921] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2866'.
[   95.931444][ T6923] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2868'.
[   95.964121][ T6929] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2871'.
[   95.973167][   T28] audit: type=1400 audit(1793273005.865:479): avc:  denied  { mount } for  pid=6930 comm="syz.1.2872" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   95.995719][   T28] audit: type=1400 audit(1793273005.865:480): avc:  denied  { remount } for  pid=6930 comm="syz.1.2872" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   96.056217][  T299] kernel write not supported for file /input/event0 (pid: 299 comm: kworker/0:2)
[   96.127114][ T6953] netlink: 'syz.1.2881': attribute type 12 has an invalid length.
[   96.135021][ T6953] netlink: 'syz.1.2881': attribute type 29 has an invalid length.
[   96.142946][ T6953] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2881'.
[   96.319466][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2897'.
[   96.630324][ T7021] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   96.668195][ T7027] fuse: Bad value for 'group_id'
[   96.941110][   T28] kauditd_printk_skb: 1 callbacks suppressed
[   96.941125][   T28] audit: type=1400 audit(1793273006.835:482): avc:  denied  { bind } for  pid=7082 comm="syz.8.2940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   96.991156][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2946'.
[   97.030553][ T7105] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   97.040001][ T7105] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[   97.049219][ T7105] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[   97.058089][ T7105] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[   97.066048][ T7105] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[   97.076199][ T7105] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[   97.083892][ T7105] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[   97.092117][ T7105] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[   97.103708][ T7105] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[   97.881429][ T7186] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   97.956673][   T28] audit: type=1400 audit(1793273007.855:483): avc:  denied  { sys_module } for  pid=7200 comm="syz.1.2993" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  100.370158][ T7358] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  100.825058][ T7453] loop7: detected capacity change from 0 to 2048
[  100.864687][ T7453] syz.7.3106 (7453): attempted to duplicate a private mapping with mremap.  This is not supported.
[  100.880827][   T28] audit: type=1400 audit(1793273010.775:484): avc:  denied  { ioctl } for  pid=7459 comm="syz.0.3110" path="socket:[55491]" dev="sockfs" ino=55491 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  101.248177][ T7517] device syzkaller1 entered promiscuous mode
[  101.289955][   T28] audit: type=1326 audit(1793273011.185:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.7.3135" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f739f559 code=0x7ffc0000
[  101.314765][   T28] audit: type=1326 audit(1793273011.185:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.7.3135" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f739f559 code=0x7ffc0000
[  101.322755][ T7521] overlayfs: fs on '.' does not support file handles, falling back to xino=off.
[  101.339946][   T28] audit: type=1326 audit(1793273011.185:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.7.3135" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f739f559 code=0x7ffc0000
[  101.373782][   T28] audit: type=1326 audit(1793273011.185:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.7.3135" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f739f559 code=0x7ffc0000
[  101.398912][   T28] audit: type=1326 audit(1793273011.185:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.7.3135" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f40f739f559 code=0x7ffc0000
[  101.423622][   T28] audit: type=1326 audit(1793273011.185:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.7.3135" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f739f559 code=0x7ffc0000
[  101.448497][   T28] audit: type=1326 audit(1793273011.185:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.7.3135" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f739f559 code=0x7ffc0000
[  101.488163][ T7531] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3142'.
[  101.497414][ T7531] bridge: RTM_NEWNEIGH with invalid ether address
[  101.523475][ T7536] kvm [7534]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008c) = 0x52f
[  101.822050][ T7587] overlayfs: failed to clone lowerpath
[  102.200887][ T7635] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3188'.
[  102.218786][ T7637] loop3: detected capacity change from 0 to 4
[  102.558180][ T7653] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns
[  102.567194][ T7653] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer.
[  102.767609][ T7664] overlayfs: failed to clone upperpath
[  102.774252][ T7664] overlayfs: failed to clone upperpath
[  102.840579][   T28] kauditd_printk_skb: 13 callbacks suppressed
[  102.840592][   T28] audit: type=1326 audit(1793273012.735:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.9.3207" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206299f559 code=0x7ffc0000
[  102.880772][   T28] audit: type=1326 audit(1793273012.765:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.9.3207" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206299f559 code=0x7ffc0000
[  102.905793][   T28] audit: type=1326 audit(1793273012.765:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.9.3207" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206299f559 code=0x7ffc0000
[  102.932609][   T28] audit: type=1326 audit(1793273012.765:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.9.3207" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f206299f559 code=0x7ffc0000
[  102.957466][   T28] audit: type=1326 audit(1793273012.765:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.9.3207" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206299f559 code=0x7ffc0000
[  102.982678][   T28] audit: type=1326 audit(1793273012.765:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.9.3207" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f206299f559 code=0x7ffc0000
[  103.007685][   T28] audit: type=1326 audit(1793273012.765:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.9.3207" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f206299f559 code=0x7ffc0000
[  103.884495][ T7756] syz.9.3243[7756] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  103.884574][ T7756] syz.9.3243[7756] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  103.994165][ T7761] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  104.084376][ T7773] xt_hashlimit: size too large, truncated to 1048576
[  104.092067][ T7775] netlink: 'syz.1.3252': attribute type 16 has an invalid length.
[  104.100119][ T7775] netlink: 'syz.1.3252': attribute type 17 has an invalid length.
[  104.112091][ T7775] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  104.269090][ T7789] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3258'.
[  104.278994][ T7789] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3258'.
[  104.327679][ T7797] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  104.363038][   T28] audit: type=1400 audit(1793273014.265:512): avc:  denied  { ioctl } for  pid=7810 comm="syz.7.3267" path="/" dev="configfs" ino=14637 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  104.389504][ T7804] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  104.437241][   T28] audit: type=1400 audit(1793273014.335:513): avc:  denied  { watch } for  pid=7828 comm="syz.7.3277" path="/299/file0" dev="tmpfs" ino=1621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  104.460270][   T28] audit: type=1400 audit(1793273014.335:514): avc:  denied  { watch_reads } for  pid=7828 comm="syz.7.3277" path="/299/file0" dev="tmpfs" ino=1621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  104.545001][ T7850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3288'.
[  104.609467][ T7855] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  104.625896][ T7855] device veth0_vlan left promiscuous mode
[  104.632151][ T7855] device veth0_vlan entered promiscuous mode
[  104.640964][ T7855] device veth1_macvtap left promiscuous mode
[  104.653194][ T7855] device veth1_macvtap entered promiscuous mode
[  104.665639][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  104.673355][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  104.681303][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  104.689862][ T6234] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.696934][ T6234] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.704586][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  104.712998][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  104.721195][ T6234] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.728243][ T6234] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.735989][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  104.744428][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  104.752568][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  104.760729][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  104.769057][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  104.777180][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  104.785358][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  104.793460][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  104.801493][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  104.809816][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  104.817915][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  104.826150][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  104.834312][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  104.842829][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  104.851366][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  104.859869][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  104.867863][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  104.876121][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  104.883741][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  104.891305][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  104.899639][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  104.907929][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  104.915672][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  104.923824][  T299] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  104.931504][ T7862] kvm [7861]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xd27e
[  104.931719][  T299] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  104.949819][ T7862] kvm [7861]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x2e7e
[  104.959378][ T7862] kvm [7861]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x14ed
[  104.970153][ T7862] kvm [7861]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x4d15
[  104.983658][ T7862] kvm [7861]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xb684
[  104.991912][ T7862] kvm [7861]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xa1f2
[  105.024286][ T7869] netlink: 204 bytes leftover after parsing attributes in process `syz.7.3296'.
[  105.041098][ T7860] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.048654][ T7860] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.056491][ T7860] device bridge_slave_0 entered promiscuous mode
[  105.064236][ T7860] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.071317][ T7860] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.079015][ T7860] device bridge_slave_1 entered promiscuous mode
[  105.119288][ T7860] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.126362][ T7860] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.133633][ T7860] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.140658][ T7860] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.167594][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  105.175484][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.183126][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.205659][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  105.225561][ T6234] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.232654][ T6234] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.240471][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  105.248828][ T6234] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.255880][ T6234] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.263388][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  105.271353][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  105.281108][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  105.292189][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  105.303110][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  105.310598][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  105.320040][ T7860] device veth0_vlan entered promiscuous mode
[  105.330617][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  105.340068][ T7860] device veth1_macvtap entered promiscuous mode
[  105.349885][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  105.360599][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  105.453854][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  105.624839][ T7922] loop3: detected capacity change from 0 to 128
[  106.000612][ T7962] loop7: detected capacity change from 0 to 128
[  106.034311][ T7962] Disabled LAPIC found during irq injection
[  106.143548][ T7987] netlink: 'syz.9.3347': attribute type 4 has an invalid length.
[  106.205530][ T7989] netlink: 'syz.9.3347': attribute type 4 has an invalid length.
[  106.235062][ T7993] overlayfs: failed to clone upperpath
[  106.265299][ T8001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3353'.
[  106.291215][ T8001] bridge1: port 1(dummy0) entered blocking state
[  106.298091][ T8001] bridge1: port 1(dummy0) entered disabled state
[  106.303067][ T8009] overlayfs: failed to clone upperpath
[  106.305357][ T8001] device dummy0 entered promiscuous mode
[  106.339849][ T8001] netlink: 'syz.3.3353': attribute type 10 has an invalid length.
[  106.348301][ T8001] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3353'.
[  106.357590][ T8001] device veth1 entered promiscuous mode
[  106.392056][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3363'.
[  106.407937][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3365'.
[  106.511959][ T8052] loop3: detected capacity change from 0 to 128
[  106.529324][ T8052] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  106.550850][ T8052] FAT-fs (loop3): error, corrupted directory (invalid i_start)
[  106.560254][ T8052] FAT-fs (loop3): Filesystem has been set read-only
[  106.576933][ T7860] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  106.608709][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3388'.
[  106.610917][   T39] kernel write not supported for file bpf-prog (pid: 39 comm: kworker/1:1)
[  106.632225][ T8074] tc_dump_action: action bad kind
[  106.679428][ T8090] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.699833][ T8090] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  106.964145][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3425'.
[  106.980633][ T8157] devpts: called with bogus options
[  106.998923][ T8148] fuse: root generation should be zero
[  107.081857][ T8174] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=8174 comm=syz.9.3433
[  107.191763][ T8203] overlayfs: failed to clone upperpath
[  107.198299][ T8203] overlayfs: failed to clone lowerpath
[  107.475445][ T8230] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  107.824981][ T8306] overlayfs: failed to clone upperpath
[  108.009530][ T8320] loop3: detected capacity change from 0 to 128
[  108.016814][ T8320] FAT-fs (loop3): Directory bread(block 162) failed
[  108.023538][ T8320] FAT-fs (loop3): Directory bread(block 163) failed
[  108.032748][ T8320] FAT-fs (loop3): Directory bread(block 164) failed
[  108.039408][ T8320] FAT-fs (loop3): Directory bread(block 165) failed
[  108.046320][ T8320] FAT-fs (loop3): Directory bread(block 166) failed
[  108.053201][ T8320] FAT-fs (loop3): Directory bread(block 167) failed
[  108.059884][ T8320] FAT-fs (loop3): Directory bread(block 168) failed
[  108.066740][ T8320] FAT-fs (loop3): Directory bread(block 169) failed
[  108.073479][ T8320] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  108.085233][ T8320] FAT-fs (loop3): Directory bread(block 162) failed
[  108.091889][ T8320] FAT-fs (loop3): Directory bread(block 163) failed
[  108.098902][ T8320] syz.3.3501: attempt to access beyond end of device
[  108.098902][ T8320] loop3: rw=3, sector=226, nr_sectors = 6 limit=128
[  108.112131][ T8320] syz.3.3501: attempt to access beyond end of device
[  108.112131][ T8320] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128
[  108.174133][ T8332] overlayfs: failed to clone upperpath
[  108.201385][ T8335] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  108.426880][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  108.426895][   T28] audit: type=1326 audit(1793273018.325:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8368 comm="syz.3.3524" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11919f559 code=0x7ffc0000
[  108.457884][   T28] audit: type=1326 audit(1793273018.325:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8368 comm="syz.3.3524" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11919f559 code=0x7ffc0000
[  108.482687][   T28] audit: type=1326 audit(1793273018.335:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8368 comm="syz.3.3524" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fb11919f559 code=0x7ffc0000
[  108.508421][   T28] audit: type=1326 audit(1793273018.335:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8368 comm="syz.3.3524" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11919f559 code=0x7ffc0000
[  108.533781][   T28] audit: type=1326 audit(1793273018.335:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8368 comm="syz.3.3524" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11919f559 code=0x7ffc0000
[  108.671245][ T8380] loop3: detected capacity change from 0 to 128
[  108.684011][ T8380] FAT-fs (loop3): bogus sectors per cluster 7
[  108.690133][ T8380] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  108.699776][ T8380] FAT-fs (loop3): Can't find a valid FAT filesystem
[  108.771372][ T8397] loop3: detected capacity change from 0 to 128
[  108.838906][ T8411] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0104 with DS=0x91
[  108.874284][ T8415] kvm [8414]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  108.882930][ T8415] kvm [8414]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  109.004040][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3549'.
[  109.017101][ T8428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3549'.
[  109.032605][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  109.038175][ T8431] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3550'.
[  109.040222][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  109.114212][ T8451] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  109.121592][ T8451] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  109.129246][ T8451] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  109.133743][   T28] audit: type=1400 audit(1793273019.035:524): avc:  denied  { write } for  pid=8453 comm="syz.1.3563" name="kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1
[  109.138122][ T8451] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  109.168621][ T8451] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  109.176734][ T8451] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  109.185171][ T8451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  109.192937][ T8451] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  109.209484][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  109.227460][  T365] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.229939][ T8462] 9pnet_fd: Insufficient options for proto=fd
[  109.234560][  T365] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.237053][   T60] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  109.252140][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  109.275612][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  109.285540][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  109.293856][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  109.302168][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  109.310453][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  109.318802][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  109.327182][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  109.340403][ T8470] netlink: 'syz.1.3570': attribute type 12 has an invalid length.
[  109.409749][   T28] audit: type=1400 audit(1793273019.305:525): avc:  denied  { unmount } for  pid=5045 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  109.432796][  T380] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  109.464603][   T28] audit: type=1400 audit(1793273019.365:526): avc:  denied  { lock } for  pid=8496 comm="syz.1.3581" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=60095 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  109.591268][ T8526] kvm: pic: single mode not supported
[  109.591280][ T8526] kvm: pic: level sensitive irq not supported
[  109.842828][  T380] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  110.444426][ T8596] tc_dump_action: action bad kind
[  110.473325][   T60] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  110.481173][   T60] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  110.557210][ T8612] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[  110.655107][ T8619] bridge0: port 3(syz_tun) entered blocking state
[  110.661560][ T8619] bridge0: port 3(syz_tun) entered disabled state
[  110.668523][ T8619] device syz_tun entered promiscuous mode
[  110.674526][ T8619] bridge0: port 3(syz_tun) entered blocking state
[  110.680953][ T8619] bridge0: port 3(syz_tun) entered forwarding state
[  110.688530][ T8619] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  110.702583][  T380] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  110.796099][ T8627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3639'.
[  110.809782][ T8627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3639'.
[  110.861487][ T8637] netlink: 'syz.1.3644': attribute type 1 has an invalid length.
[  110.885078][   T28] audit: type=1326 audit(1793273020.785:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8640 comm="syz.1.3646" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25459f559 code=0x7ffc0000
[  110.910093][   T28] audit: type=1326 audit(1793273020.785:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8640 comm="syz.1.3646" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25459f559 code=0x7ffc0000
[  110.985117][ T8661] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3656'.
[  111.032120][ T8671] loop1: detected capacity change from 0 to 256
[  111.044047][ T8671] FAT-fs (loop1): Directory bread(block 64) failed
[  111.050640][ T8671] FAT-fs (loop1): Directory bread(block 65) failed
[  111.057332][ T8671] FAT-fs (loop1): Directory bread(block 66) failed
[  111.063925][ T8671] FAT-fs (loop1): Directory bread(block 67) failed
[  111.070625][ T8671] FAT-fs (loop1): Directory bread(block 68) failed
[  111.077502][ T8671] FAT-fs (loop1): Directory bread(block 69) failed
[  111.090130][ T8671] FAT-fs (loop1): Directory bread(block 70) failed
[  111.096889][ T8671] FAT-fs (loop1): Directory bread(block 71) failed
[  111.104502][ T8671] FAT-fs (loop1): Directory bread(block 72) failed
[  111.111039][ T8671] FAT-fs (loop1): Directory bread(block 73) failed
[  111.127216][ T8671] syz.1.3661: attempt to access beyond end of device
[  111.127216][ T8671] loop1: rw=2049, sector=1768, nr_sectors = 4 limit=256
[  111.155196][ T6234] kworker/u4:5: attempt to access beyond end of device
[  111.155196][ T6234] loop1: rw=1, sector=1768, nr_sectors = 4 limit=256
[  111.164612][ T8690] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3670'.
[  111.341294][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3697'.
[  112.332301][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  112.342754][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  112.350152][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  112.357963][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  112.366635][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  112.374657][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  112.384176][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  112.394954][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  112.403216][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  112.422724][  T380] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  112.483737][  T380] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  112.922475][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  112.936912][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  112.950283][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  112.959947][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  112.968777][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  112.977153][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  112.990499][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  113.002782][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  113.015368][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  113.025167][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  113.033756][   T19] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  113.100360][ T8871] erofs: (device loop1): erofs_read_superblock: cannot find valid erofs superblock
[  113.118323][ T8873] __nla_validate_parse: 1 callbacks suppressed
[  113.118335][ T8873] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3758'.
[  113.133725][ T8873] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3758'.
[  114.212172][ T8917] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  114.315715][   T28] kauditd_printk_skb: 15 callbacks suppressed
[  114.315730][   T28] audit: type=1400 audit(1793273024.215:544): avc:  denied  { lock } for  pid=8926 comm="syz.3.3777" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  114.552669][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  115.116124][ T8958] xt_hashlimit: size too large, truncated to 1048576
[  115.285574][   T28] audit: type=1326 audit(1793273025.185:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8974 comm="syz.7.3799" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f739f559 code=0x7ffc0000
[  115.327387][   T28] audit: type=1326 audit(1793273025.185:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8974 comm="syz.7.3799" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f739f559 code=0x7ffc0000
[  115.353924][   T28] audit: type=1326 audit(1793273025.185:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8974 comm="syz.7.3799" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f40f739f559 code=0x7ffc0000
[  115.380091][   T28] audit: type=1326 audit(1793273025.185:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8974 comm="syz.7.3799" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f739f559 code=0x7ffc0000
[  115.421070][   T28] audit: type=1326 audit(1793273025.185:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8974 comm="syz.7.3799" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f739f559 code=0x7ffc0000
[  116.092185][ T9017] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.099520][ T9017] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.108373][ T9017] device bridge_slave_0 entered promiscuous mode
[  116.118507][ T9017] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.125676][ T9017] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.133169][ T9017] device bridge_slave_1 entered promiscuous mode
[  116.172892][ T9017] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.179943][ T9017] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.187235][ T9017] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.194273][ T9017] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.213755][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  116.221450][  T222] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.229066][  T222] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.238782][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  116.247483][  T222] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.254571][  T222] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.267531][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  116.276055][  T222] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.283168][  T222] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.300518][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  116.308762][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  116.327913][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  116.341023][ T9017] device veth0_vlan entered promiscuous mode
[  116.353500][ T9039] overlayfs: failed to clone upperpath
[  116.359648][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  116.368727][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  116.377480][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  116.398109][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  116.406782][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  116.419319][ T9017] device veth1_macvtap entered promiscuous mode
[  116.429261][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  116.437161][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  116.445739][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  116.455280][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  116.463818][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  116.516587][ T9052] kvm: emulating exchange as write
[  116.517926][ T9056] xt_hashlimit: size too large, truncated to 1048576
[  116.689068][   T28] audit: type=1400 audit(1793273026.585:550): avc:  denied  { watch } for  pid=9064 comm="syz.2.3831" path="/3/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  116.713422][ T9076] xt_hashlimit: size too large, truncated to 1048576
[  117.112538][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  117.120210][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  117.289818][ T9100] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3846'.
[  117.432587][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  117.434271][ T9122] loop1: detected capacity change from 0 to 16
[  117.447369][ T9122] erofs: (device loop1): mounted with root inode @ nid 36.
[  117.454745][ T9122] SELinux: (dev loop1, type erofs) getxattr errno 117
[  119.104739][ T9244] device veth0_virt_wifi entered promiscuous mode
[  119.232280][ T9257] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3914'.
[  119.241680][ T9257] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3914'.
[  119.278807][ T9265] xt_hashlimit: size too large, truncated to 1048576
[  120.372054][   T28] audit: type=1326 audit(1793273030.265:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.3.3925" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11919f559 code=0x7ffc0000
[  120.403485][   T28] audit: type=1326 audit(1793273030.275:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.3.3925" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11919f559 code=0x7ffc0000
[  120.443812][   T28] audit: type=1326 audit(1793273030.275:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.3.3925" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11919f559 code=0x7ffc0000
[  120.469022][   T28] audit: type=1326 audit(1793273030.275:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.3.3925" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fb11919f559 code=0x7ffc0000
[  120.495123][   T28] audit: type=1326 audit(1793273030.275:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.3.3925" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11919f559 code=0x7ffc0000
[  120.532649][   T28] audit: type=1326 audit(1793273030.275:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.3.3925" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb11919f559 code=0x7ffc0000
[  120.559539][   T28] audit: type=1326 audit(1793273030.275:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.3.3925" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb11919f559 code=0x7ffc0000
[  120.615001][ T9318] kvm: pic: level sensitive irq not supported
[  120.615167][ T9318] kvm: pic: non byte write
[  120.627966][ T9330] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3943'.
[  120.653523][   T28] audit: type=1400 audit(1793273030.555:558): avc:  denied  { getopt } for  pid=9333 comm="syz.9.3945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  120.724071][ T9353] overlayfs: failed to clone upperpath
[  122.046230][ T9463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4000'.
[  122.079957][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4003'.
[  122.322236][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  122.335180][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  122.352886][ T9492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4011'.
[  122.572396][ T9533] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.580671][ T9533] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.622338][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  122.629877][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  122.637787][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  122.647127][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  122.658171][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  122.678152][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  122.694550][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  122.708623][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  122.726446][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  122.741498][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  122.756152][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  122.764031][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  122.772915][   T28] audit: type=1400 audit(1793273032.675:559): avc:  denied  { checkpoint_restore } for  pid=9545 comm="syz.3.4033" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  122.806479][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  122.814481][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  122.822288][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  122.830417][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  122.837986][   T39] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  122.848489][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  122.857116][ T9533] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.864213][ T9533] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.871941][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  122.880140][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  122.889489][ T9533] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.896579][ T9533] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.910119][ T9533] device veth0_virt_wifi left promiscuous mode
[  122.980839][ T9560] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4039'.
[  122.990464][ T9560] device gretap0 entered promiscuous mode
[  123.007039][ T9560] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4039'.
[  123.016382][ T9560] 0ªî{X¹¦: renamed from gretap0
[  123.022594][ T9560] device 
30ªî{X¹¦ left promiscuous mode
[  123.030748][ T9560] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  123.102676][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  123.110553][   T28] audit: type=1400 audit(1793273033.005:560): avc:  denied  { read } for  pid=9582 comm="syz.1.4049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  123.175751][ T9596] loop1: detected capacity change from 0 to 128
[  123.206315][ T9596] syz.1.4055: attempt to access beyond end of device
[  123.206315][ T9596] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128
[  123.224739][ T9596] syz.1.4055: attempt to access beyond end of device
[  123.224739][ T9596] loop1: rw=2049, sector=140, nr_sectors = 2 limit=128
[  123.243683][ T9596] Buffer I/O error on dev loop1, logical block 70, lost async page write
[  123.436693][ T9632] netlink: 276 bytes leftover after parsing attributes in process `syz.7.4071'.
[  123.472736][   T39] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  123.750115][ T9662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4085'.
[  123.831535][ T9669] veth0_to_hsr: vlans aren't supported yet for dev_uc|mc_add()
[  124.072626][ T9682] loop2: detected capacity change from 0 to 512
[  124.132974][ T6250] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  124.495104][ T9721] netlink: 'syz.2.4107': attribute type 6 has an invalid length.
[  124.530435][ T9717] netlink: 'syz.2.4107': attribute type 6 has an invalid length.
[  124.580945][ T9727] overlayfs: failed to clone upperpath
[  124.589248][ T9728] loop2: detected capacity change from 0 to 512
[  125.372508][   T28] kauditd_printk_skb: 19284 callbacks suppressed
[  125.372522][   T28] audit: type=1326 audit(1793273035.265:19845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9607 comm="syz.3.4061" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb1191408d9 code=0x7ffc0000
[  125.416080][   T28] audit: type=1326 audit(1793273035.275:19846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9607 comm="syz.3.4061" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb1191408d9 code=0x7ffc0000
[  125.449019][   T28] audit: type=1326 audit(1793273035.275:19847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9607 comm="syz.3.4061" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb1191408d9 code=0x7ffc0000
[  125.479820][   T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  125.497148][   T28] audit: type=1326 audit(1793273035.275:19848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9607 comm="syz.3.4061" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb1191408d9 code=0x7ffc0000
[  125.524066][   T28] audit: type=1326 audit(1793273035.275:19849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9607 comm="syz.3.4061" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb1191408d9 code=0x7ffc0000
[  125.562517][   T28] audit: type=1326 audit(1793273035.275:19850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9607 comm="syz.3.4061" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb1191408d9 code=0x7ffc0000
[  125.589387][   T28] audit: type=1326 audit(1793273035.275:19851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9607 comm="syz.3.4061" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb1191408d9 code=0x7ffc0000
[  125.619682][   T28] audit: type=1326 audit(1793273035.275:19852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9607 comm="syz.3.4061" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb1191408d9 code=0x7ffc0000
[  125.649117][   T28] audit: type=1326 audit(1793273035.275:19853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9607 comm="syz.3.4061" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb1191408d9 code=0x7ffc0000
[  125.676795][   T28] audit: type=1326 audit(1793273035.275:19854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9607 comm="syz.3.4061" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb1191408d9 code=0x7ffc0000
[  126.180824][ T9859] overlayfs: failed to clone lowerpath
[  126.304097][ T9871] overlayfs: unrecognized mount option "/" or missing value
[  126.506994][ T9881] pit: kvm: requested 186057 ns i8254 timer period limited to 200000 ns
[  126.515797][ T9881] pit: kvm: requested 181866 ns i8254 timer period limited to 200000 ns
[  126.524852][ T9881] pit: kvm: requested 139123 ns i8254 timer period limited to 200000 ns
[  126.533617][ T9887] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4185'.
[  126.534981][ T9881] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns
[  126.542899][ T9887] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4185'.
[  126.552970][ T9881] pit: kvm: requested 67047 ns i8254 timer period limited to 200000 ns
[  126.572276][ T9881] pit: kvm: requested 191085 ns i8254 timer period limited to 200000 ns
[  126.581342][ T9881] pit: kvm: requested 33523 ns i8254 timer period limited to 200000 ns
[  126.590508][ T9881] pit: kvm: requested 37714 ns i8254 timer period limited to 200000 ns
[  126.599495][ T9881] pit: kvm: requested 194438 ns i8254 timer period limited to 200000 ns
[  126.609133][ T9881] pit: kvm: requested 108952 ns i8254 timer period limited to 200000 ns
[  126.722544][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  126.847027][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4193'.
[  127.024027][ T9949] tmpfs: Bad value for 'nr_blocks'
[  127.165693][ T9982] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4228'.
[  127.176263][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4228'.
[  127.185755][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4228'.
[  127.193836][ T9987] tmpfs: Too few inodes for current use
[  127.251217][T10002] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.423037][T10051] loop3: detected capacity change from 0 to 512
[  127.498639][T10059] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.505837][T10059] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.980271][T10084] loop1: detected capacity change from 0 to 512
[  127.987423][T10084] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  128.368127][T10153] overlayfs: failed to clone upperpath
[  128.753090][T10202] netlink: 1021 bytes leftover after parsing attributes in process `syz.3.4322'.
[  129.323651][T10258] device bridge3 entered promiscuous mode
[  129.646092][T10306] IPv6: addrconf: prefix option has invalid lifetime
[  129.708559][T10317] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4373'.
[  129.912311][T10345] loop2: detected capacity change from 0 to 128
[  129.944182][T10345] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  129.988931][ T9017] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[  130.010300][ T9017] FAT-fs (loop2): Filesystem has been set read-only
[  130.376219][T10402] size and base must be multiples of 4 kiB
[  130.384229][T10402] CPU: 0 PID: 10402 Comm: syz.3.4415 Not tainted syzkaller #0
[  130.391767][T10402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  130.401832][T10402] Call Trace:
[  130.405119][T10402]  <TASK>
[  130.408054][T10402]  __dump_stack+0x21/0x24
[  130.412399][T10402]  dump_stack_lvl+0x110/0x170
[  130.417079][T10402]  ? __cfi_dump_stack_lvl+0x8/0x8
[  130.422116][T10402]  dump_stack+0x15/0x24
[  130.426287][T10402]  mtrr_del+0x84/0x90
[  130.430277][T10402]  mtrr_ioctl+0x8e5/0xfb0
[  130.434622][T10402]  ? __cfi_mtrr_ioctl+0x10/0x10
[  130.439475][T10402]  ? selinux_file_ioctl+0x3ad/0x4c0
[  130.444698][T10402]  ? __fget_files+0x2d1/0x330
[  130.449390][T10402]  ? __cfi_mtrr_ioctl+0x10/0x10
[  130.454249][T10402]  proc_reg_unlocked_ioctl+0x1e6/0x2d0
[  130.459724][T10402]  ? __cfi_proc_reg_unlocked_ioctl+0x10/0x10
[  130.465726][T10402]  __se_sys_ioctl+0x12f/0x1b0
[  130.470421][T10402]  __x64_sys_ioctl+0x7b/0x90
[  130.475030][T10402]  x64_sys_call+0x58b/0x9a0
[  130.479544][T10402]  do_syscall_64+0x4c/0xa0
[  130.483970][T10402]  ? clear_bhb_loop+0x30/0x80
[  130.488674][T10402]  ? clear_bhb_loop+0x30/0x80
[  130.493378][T10402]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  130.499291][T10402] RIP: 0033:0x7fb11919f559
[  130.503721][T10402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  130.523335][T10402] RSP: 002b:00007fb11a132028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  130.531781][T10402] RAX: ffffffffffffffda RBX: 00007fb119425fa0 RCX: 00007fb11919f559
[  130.539776][T10402] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000003
[  130.547761][T10402] RBP: 00007fb119236b20 R08: 0000000000000000 R09: 0000000000000000
[  130.555732][T10402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  130.563692][T10402] R13: 00007fb119426038 R14: 00007fb119425fa0 R15: 00007ffd7f6f2438
[  130.571655][T10402]  </TASK>
[  130.775231][  T222] device bridge_slave_1 left promiscuous mode
[  130.781519][  T222] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.797540][  T222] device bridge_slave_0 left promiscuous mode
[  130.805542][  T222] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.816319][  T222] device veth1_macvtap left promiscuous mode
[  130.822375][  T222] device veth0_vlan left promiscuous mode
[  130.914269][T10426] bridge0: port 3(syz_tun) entered blocking state
[  130.920772][T10426] bridge0: port 3(syz_tun) entered disabled state
[  130.927659][T10426] device syz_tun entered promiscuous mode
[  130.933534][T10426] bridge0: port 3(syz_tun) entered blocking state
[  130.939986][T10426] bridge0: port 3(syz_tun) entered forwarding state
[  130.972174][T10415] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.979379][T10415] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.986838][T10415] device bridge_slave_0 entered promiscuous mode
[  130.993761][T10415] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.000896][T10415] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.008861][T10415] device bridge_slave_1 entered promiscuous mode
[  131.046543][T10415] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.053619][T10415] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.060850][T10415] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.067907][T10415] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.087234][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  131.094997][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.102317][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.111713][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  131.120214][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  131.129288][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.136338][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.153995][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  131.162589][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  131.170718][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.177756][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.188162][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  131.196909][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  131.205960][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  131.214069][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  131.226913][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  131.235404][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  131.246410][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  131.254485][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  131.263060][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  131.270522][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  131.278630][T10415] device veth0_vlan entered promiscuous mode
[  131.288345][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  131.296550][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  131.305672][T10415] device veth1_macvtap entered promiscuous mode
[  131.314933][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  131.322824][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  131.331110][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  131.347461][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  131.356165][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  131.379467][T10452] 9pnet_fd: Insufficient options for proto=fd
[  131.386472][   T28] kauditd_printk_skb: 5088 callbacks suppressed
[  131.386486][   T28] audit: type=1400 audit(1793273041.285:24943): avc:  denied  { write } for  pid=10449 comm="syz.3.4434" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  131.628018][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4449'.
[  131.637736][T10485] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4449'.
[  131.973320][ T8269] bridge0: port 3(syz_tun) entered disabled state
[  131.992179][ T8269] device syz_tun left promiscuous mode
[  132.015067][ T8269] bridge0: port 3(syz_tun) entered disabled state
[  132.085154][T10529] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.097072][T10529] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.105035][T10529] device bridge_slave_0 entered promiscuous mode
[  132.122594][T10529] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.131932][T10529] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.147312][T10529] device bridge_slave_1 entered promiscuous mode
[  132.171127][T10551] loop1: detected capacity change from 0 to 256
[  132.181292][   T28] audit: type=1400 audit(1793273042.075:24944): avc:  denied  { watch } for  pid=10550 comm="syz.1.4479" path="/440/file0/file0" dev="loop1" ino=1048805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  132.320857][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  132.331042][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  132.358486][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  132.368766][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  132.379558][  T365] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.386645][  T365] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.401541][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  132.410739][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  132.419180][  T365] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.426317][  T365] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.450995][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  132.458934][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  132.469143][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  132.486703][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  132.498819][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  132.507846][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  132.515645][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  132.527410][T10529] device veth0_vlan entered promiscuous mode
[  132.538884][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  132.549853][T10529] device veth1_macvtap entered promiscuous mode
[  132.564650][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  132.573850][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  132.684058][T10609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4502'.
[  132.743932][   T43] device bridge_slave_1 left promiscuous mode
[  132.750182][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.759469][   T43] device bridge_slave_0 left promiscuous mode
[  132.765787][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.774364][   T43] device veth1_macvtap left promiscuous mode
[  132.780498][   T43] device veth0_vlan left promiscuous mode
[  132.997573][T10625] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4511'.
[  133.717215][   T28] audit: type=1400 audit(1793273043.615:24945): avc:  denied  { getopt } for  pid=10651 comm="syz.9.4522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  133.898459][T10676] loop4: detected capacity change from 0 to 256
[  133.950753][T10415] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  133.959850][T10415] FAT-fs (loop4): Filesystem has been set read-only
[  133.971552][T10415] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  134.493074][T10710] kvm [10708]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  134.502032][T10710] kvm [10708]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  134.511898][T10706] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.524492][T10706] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.547880][T10706] device bridge_slave_0 entered promiscuous mode
[  134.574306][T10706] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.596878][T10706] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.635011][T10706] device bridge_slave_1 entered promiscuous mode
[  134.663478][T10717] x_tables: duplicate underflow at hook 3
[  134.700353][   T43] device bridge_slave_1 left promiscuous mode
[  134.708250][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.734575][   T43] device bridge_slave_0 left promiscuous mode
[  134.759653][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.773287][   T43] device veth1_macvtap left promiscuous mode
[  134.784845][   T43] device veth0_vlan left promiscuous mode
[  134.934546][T10724] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  135.021626][T10706] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.028788][T10706] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.036113][T10706] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.043168][T10706] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.066881][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  135.074777][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.082265][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.100216][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  135.108990][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.116103][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.124270][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  135.133274][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.140319][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.153163][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  135.167658][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  135.197142][T10706] device veth0_vlan entered promiscuous mode
[  135.206970][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  135.215706][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  135.224708][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  135.232681][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  135.253161][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  135.261107][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  135.269604][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  135.277932][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  135.286819][T10706] device veth1_macvtap entered promiscuous mode
[  135.297738][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  135.305738][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  135.314596][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  135.330734][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  135.339508][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  136.102098][T10811] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  136.168310][T10828] overlayfs: failed to clone upperpath
[  136.316333][T10836] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.324211][T10836] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.331669][T10836] device bridge_slave_0 entered promiscuous mode
[  136.338758][T10836] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.345920][T10836] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.353325][T10836] device bridge_slave_1 entered promiscuous mode
[  136.425241][T10836] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.432337][T10836] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.439640][T10836] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.446692][T10836] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.474239][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  136.481938][  T222] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.489792][  T222] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.499458][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  136.508028][  T222] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.515109][  T222] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.532440][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  136.540810][  T222] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.547874][  T222] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.557922][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  136.567403][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  136.581016][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  136.592251][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  136.600808][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  136.608452][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  136.616915][T10836] device veth0_vlan entered promiscuous mode
[  136.627625][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  136.637519][T10836] device veth1_macvtap entered promiscuous mode
[  136.647029][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  136.657136][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  136.712936][T10878] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  136.727643][T10878] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  136.884552][T10898] netlink: 'syz.9.4628': attribute type 10 has an invalid length.
[  136.892761][T10898] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4628'.
[  136.901811][T10898] device veth1 entered promiscuous mode
[  137.019029][T10912] netlink: 116 bytes leftover after parsing attributes in process `syz.9.4634'.
[  137.028402][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4634'.
[  137.318469][T10947] loop7: detected capacity change from 0 to 128
[  137.334044][   T28] audit: type=1400 audit(1793273047.235:24946): avc:  denied  { mounton } for  pid=10946 comm="syz.7.4649" path="/13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/proc" dev="loop7" ino=1048851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  137.334671][T10947] FAULT_INJECTION: forcing a failure.
[  137.334671][T10947] name failslab, interval 1, probability 0, space 0, times 0
[  137.391763][T10947] CPU: 1 PID: 10947 Comm: syz.7.4649 Not tainted syzkaller #0
[  137.399223][T10947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  137.409267][T10947] Call Trace:
[  137.412532][T10947]  <TASK>
[  137.415447][T10947]  __dump_stack+0x21/0x24
[  137.419766][T10947]  dump_stack_lvl+0x110/0x170
[  137.424536][T10947]  ? __cfi_dump_stack_lvl+0x8/0x8
[  137.429541][T10947]  ? __kasan_slab_free+0x11/0x20
[  137.434465][T10947]  dump_stack+0x15/0x24
[  137.438603][T10947]  should_fail_ex+0x3bf/0x510
[  137.443265][T10947]  __should_failslab+0xac/0xf0
[  137.448054][T10947]  should_failslab+0x9/0x20
[  137.452548][T10947]  slab_pre_alloc_hook+0x30/0x1d0
[  137.457563][T10947]  kmem_cache_alloc_lru+0x49/0x280
[  137.462672][T10947]  ? fat_alloc_inode+0x2c/0xc0
[  137.467421][T10947]  fat_alloc_inode+0x2c/0xc0
[  137.471998][T10947]  ? __cfi_fat_alloc_inode+0x10/0x10
[  137.477266][T10947]  new_inode_pseudo+0x70/0x1f0
[  137.482017][T10947]  new_inode+0x28/0x1e0
[  137.486164][T10947]  fat_build_inode+0x201/0x3d0
[  137.490920][T10947]  vfat_lookup+0x335/0x590
[  137.495326][T10947]  ? slab_pre_alloc_hook+0x30/0x1d0
[  137.500514][T10947]  ? __cfi_vfat_lookup+0x10/0x10
[  137.505436][T10947]  ? _raw_spin_lock+0x94/0xf0
[  137.510095][T10947]  ? __cfi__raw_spin_lock+0x10/0x10
[  137.515277][T10947]  ? __d_alloc+0x4d5/0x6d0
[  137.519688][T10947]  ? d_alloc+0x1f4/0x260
[  137.523921][T10947]  lookup_one_qstr_excl+0x125/0x270
[  137.529110][T10947]  filename_create+0x23d/0x440
[  137.533864][T10947]  ? kern_path_create+0x1b0/0x1b0
[  137.538875][T10947]  ? __check_object_size+0x45a/0x600
[  137.544147][T10947]  do_mknodat+0xdb/0x790
[  137.548372][T10947]  ? getname_flags+0x205/0x510
[  137.553120][T10947]  __x64_sys_mknodat+0xa9/0xc0
[  137.557875][T10947]  x64_sys_call+0x220/0x9a0
[  137.562364][T10947]  do_syscall_64+0x4c/0xa0
[  137.566765][T10947]  ? clear_bhb_loop+0x30/0x80
[  137.571431][T10947]  ? clear_bhb_loop+0x30/0x80
[  137.576096][T10947]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  137.581977][T10947] RIP: 0033:0x7fa147f9f559
[  137.586376][T10947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  137.605971][T10947] RSP: 002b:00007fa148e15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[  137.614375][T10947] RAX: ffffffffffffffda RBX: 00007fa148225fa0 RCX: 00007fa147f9f559
[  137.622337][T10947] RDX: 0000000000006000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  137.630294][T10947] RBP: 00007fa148036b20 R08: 0000000000000000 R09: 0000000000000000
[  137.638251][T10947] R10: 000000000000070e R11: 0000000000000246 R12: 0000000000000000
[  137.646204][T10947] R13: 00007fa148226038 R14: 00007fa148225fa0 R15: 00007ffc26019128
[  137.654164][T10947]  </TASK>
[  137.755934][T10969] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  137.764059][T10969] bridge1: port 1(dummy0) entered blocking state
[  137.770448][T10969] bridge1: port 1(dummy0) entered forwarding state
[  137.797725][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  137.810806][  T222] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.817919][  T222] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.826121][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  137.834536][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  137.843081][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  137.851243][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  137.859846][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  137.867977][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  137.876304][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  137.884442][  T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  137.967979][   T28] audit: type=1326 audit(1793273047.865:24947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.7.4674" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa147f9f559 code=0x7ffc0000
[  137.994172][   T28] audit: type=1400 audit(1793273047.865:24948): avc:  denied  { remount } for  pid=11003 comm="syz.3.4675" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  138.015456][   T28] audit: type=1326 audit(1793273047.865:24949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.7.4674" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa147f9f559 code=0x7ffc0000
[  138.044685][   T28] audit: type=1326 audit(1793273047.865:24950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.7.4674" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa147f9f559 code=0x7ffc0000
[  138.069888][   T28] audit: type=1326 audit(1793273047.865:24951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.7.4674" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa147f9f559 code=0x7ffc0000
[  138.095367][   T28] audit: type=1326 audit(1793273047.865:24952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.7.4674" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fa147f9f559 code=0x7ffc0000
[  138.121766][   T28] audit: type=1326 audit(1793273047.865:24953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.7.4674" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa147f9f559 code=0x7ffc0000
[  138.154927][   T28] audit: type=1326 audit(1793273047.865:24954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.7.4674" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa147f9f559 code=0x7ffc0000
[  138.180979][   T28] audit: type=1326 audit(1793273047.865:24955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.7.4674" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa147f9f559 code=0x7ffc0000
[  138.218109][T11019] netlink: 'syz.7.4681': attribute type 1 has an invalid length.
[  138.261958][T11034] netlink: 'syz.9.4688': attribute type 20 has an invalid length.
[  138.299449][T11040] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  138.311192][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  138.321956][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  138.330292][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  138.339111][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  138.348262][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  138.357049][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  138.365731][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  138.374134][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  138.567771][T11091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=634 sclass=netlink_route_socket pid=11091 comm=syz.9.4715
[  138.615132][T11095] kvm: MONITOR instruction emulated as NOP!
[  138.687565][T11100] loop9: detected capacity change from 0 to 256
[  138.714611][T11100] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901428352 (7802856704 ns) > initial count (110847878 ns). Using initial count to start timer.
[  139.073435][T11143] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  139.094870][T11146] ip6gretap0: refused to change device tx_queue_len
[  139.128250][T11150] tmpfs: Too small a size for current use
[  139.436504][T11186] netlink: 'syz.7.4755': attribute type 46 has an invalid length.
[  139.444419][T11186] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4755'.
[  139.488723][T11192] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4758'.
[  139.636806][T11204] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4763'.
[  139.665590][T11204] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4763'.
[  140.178880][T11240] xt_hashlimit: size too large, truncated to 1048576
[  140.426146][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4791'.
[  140.698175][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4807'.
[  140.768831][T11321] loop1: detected capacity change from 0 to 512
[  141.307119][T11395] device gretap1 entered promiscuous mode
[  141.650229][T11422] device ipip0 entered promiscuous mode
[  141.656135][T11422] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready
[  141.824199][T11444] xt_hashlimit: size too large, truncated to 1048576
[  141.947795][T11452] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  141.962361][T11452] overlayfs: failed to set xattr on upper
[  141.984760][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4874'.
[  142.018201][T11465] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  142.027568][T11465] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on.
[  142.445515][T11524] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  142.656485][T11561] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  142.746037][T11575] loop9: detected capacity change from 0 to 16
[  142.760425][T11575] erofs: (device loop9): erofs_read_superblock: cannot find valid erofs superblock
[  143.355377][T11627] fuse: Bad value for 'fd'
[  143.496555][T11637] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4950'.
[  143.670983][T11654] fuse: Bad value for 'fd'
[  143.919604][T11679] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  143.955363][T11683] fuse: Bad value for 'fd'
[  144.146352][T11706] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  144.284478][T11725] loop6: detected capacity change from 0 to 128
[  144.313474][T11725] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  144.355772][  T222] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  144.558118][T11758] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  144.738759][   T28] kauditd_printk_skb: 275 callbacks suppressed
[  144.738775][   T28] audit: 
[  146.002818][T11814] loop7: detected capacity change from 0 to 256
[  146.016534][T11814] FAT-fs (loop7): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  146.026228][T11814] FAT-fs (loop7): bogus number of directory entries (1)
[  146.033506][T11814] FAT-fs (loop7): Can't find a valid FAT filesystem
[  146.156738][T11819] kvm [11818]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  146.165245][T11819] kvm [11818]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  146.499122][   T28] audit: type=1400 audit(1793273056.395:25232): avc:  denied  { write } for  pid=11843 comm="syz.9.5035" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  146.600970][   T28] audit: type=1400 audit(1793273056.495:25233): avc:  denied  { setattr } for  pid=11843 comm="syz.9.5035" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  146.728437][T11858] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  146.969571][T11870] loop9: detected capacity change from 0 to 256
[  146.979194][T11870] FAT-fs (loop9): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  146.988372][T11870] FAT-fs (loop9): bogus number of directory entries (1)
[  146.995611][T11870] FAT-fs (loop9): Can't find a valid FAT filesystem
[  147.193533][T11887] FAULT_INJECTION: forcing a failure.
[  147.193533][T11887] name failslab, interval 1, probability 0, space 0, times 0
[  147.207369][T11887] CPU: 1 PID: 11887 Comm: syz.9.5051 Not tainted syzkaller #0
[  147.214862][T11887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  147.224925][T11887] Call Trace:
[  147.228198][T11887]  <TASK>
[  147.231135][T11887]  __dump_stack+0x21/0x24
[  147.235458][T11887]  dump_stack_lvl+0x110/0x170
[  147.240120][T11887]  ? __cfi_dump_stack_lvl+0x8/0x8
[  147.245128][T11887]  ? __bitmap_weight+0xb9/0x110
[  147.249966][T11887]  ? __alloc_percpu+0x24/0x30
[  147.254631][T11887]  dump_stack+0x15/0x24
[  147.258771][T11887]  should_fail_ex+0x3bf/0x510
[  147.263432][T11887]  ? alloc_vfsmnt+0x27/0x4a0
[  147.268015][T11887]  __should_failslab+0xac/0xf0
[  147.272771][T11887]  should_failslab+0x9/0x20
[  147.277262][T11887]  kmem_cache_alloc+0x3b/0x320
[  147.282018][T11887]  ? __cfi__raw_spin_lock+0x10/0x10
[  147.287213][T11887]  alloc_vfsmnt+0x27/0x4a0
[  147.291630][T11887]  clone_mnt+0x6d/0xd00
[  147.295781][T11887]  ? is_subdir+0x60/0x150
[  147.300145][T11887]  copy_tree+0x3dd/0x790
[  147.304387][T11887]  copy_mnt_ns+0x180/0x930
[  147.308790][T11887]  ? create_new_namespaces+0x34/0x660
[  147.314159][T11887]  ? create_new_namespaces+0x34/0x660
[  147.319528][T11887]  create_new_namespaces+0xd0/0x660
[  147.324720][T11887]  unshare_nsproxy_namespaces+0x120/0x170
[  147.330433][T11887]  ksys_unshare+0x4d5/0x850
[  147.334932][T11887]  ? __cfi_ksys_unshare+0x10/0x10
[  147.339948][T11887]  ? fpregs_restore_userregs+0x128/0x260
[  147.345571][T11887]  __x64_sys_unshare+0x38/0x40
[  147.350330][T11887]  x64_sys_call+0x767/0x9a0
[  147.354831][T11887]  do_syscall_64+0x4c/0xa0
[  147.359234][T11887]  ? clear_bhb_loop+0x30/0x80
[  147.363902][T11887]  ? clear_bhb_loop+0x30/0x80
[  147.368573][T11887]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  147.374461][T11887] RIP: 0033:0x7f15f259f559
[  147.378864][T11887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  147.398460][T11887] RSP: 002b:00007f15f3512028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  147.406867][T11887] RAX: ffffffffffffffda RBX: 00007f15f2825fa0 RCX: 00007f15f259f559
[  147.414829][T11887] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400
[  147.422789][T11887] RBP: 00007f15f2636b20 R08: 0000000000000000 R09: 0000000000000000
[  147.430748][T11887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  147.438711][T11887] R13: 00007f15f2826038 R14: 00007f15f2825fa0 R15: 00007fffc0f92f58
[  147.446679][T11887]  </TASK>
[  147.738454][T11930] loop7: detected capacity change from 0 to 512
[  147.814550][T11948] TCP: tcp_parse_options: Illegal window scaling value 155 > 14 received
[  147.918694][T11976] loop3: detected capacity change from 0 to 16
[  147.931848][T11976] erofs: (device loop3): mounted with root inode @ nid 36.
[  147.940513][T11982] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5092'.
[  147.947837][T11976] syz.3.5087: attempt to access beyond end of device
[  147.947837][T11976] loop3: rw=524288, sector=16, nr_sectors = 32 limit=16
[  147.950933][T11982] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5092'.
[  147.963160][T11973] overlayfs: statfs failed on './file0'
[  147.972227][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5092'.
[  147.978464][T11976] syz.3.5087: attempt to access beyond end of device
[  147.978464][T11976] loop3: rw=524288, sector=8, nr_sectors = 32 limit=16
[  148.028047][T11989] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5095'.
[  148.062702][T12000] loop9: detected capacity change from 0 to 128
[  148.069438][   T28] audit: type=1326 audit(1793273057.965:25234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.5102" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa147f9f559 code=0x7ffc0000
[  148.086315][T12000] FAT-fs (loop9): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1)
[  148.102796][   T28] audit: type=1326 audit(1793273057.965:25235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.5102" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa147f9f559 code=0x7ffc0000
[  148.144398][   T28] audit: type=1326 audit(1793273057.965:25236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.5102" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa147f9f559 code=0x7ffc0000
[  148.209682][   T28] audit: type=1326 audit(1793273057.965:25237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.5102" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fa147f9f559 code=0x7ffc0000
[  148.237624][T12026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61712 sclass=netlink_route_socket pid=12026 comm=syz.6.5109
[  148.260431][   T28] audit: type=1326 audit(1793273057.965:25238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.5102" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa147f9f559 code=0x7ffc0000
[  148.285686][   T28] audit: type=1326 audit(1793273057.965:25239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.5102" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa147f9f559 code=0x7ffc0000
[  148.310774][   T28] audit: type=1326 audit(1793273057.965:25240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.5102" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa147f9f559 code=0x7ffc0000
[  148.360284][T12044] syz.7.5120 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  148.814530][T12119] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12119 comm=syz.6.5153
[  149.024774][T12150] loop6: detected capacity change from 0 to 256
[  149.439651][T12198] loop1: detected capacity change from 0 to 512
[  149.494335][T12204] overlayfs: failed to clone upperpath
[  149.825344][T12231] netlink: 'syz.9.5202': attribute type 8 has an invalid length.
[  149.893706][T12238] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5205'.
[  149.911465][T12238] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5205'.
[  149.991986][T12243] loop9: detected capacity change from 0 to 128
[  150.031833][T12243] syz.9.5207: attempt to access beyond end of device
[  150.031833][T12243] loop9: rw=2049, sector=153, nr_sectors = 888 limit=128
[  150.272377][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  150.272390][   T28] audit: type=1400 audit(1793273060.165:25242): avc:  denied  { nlmsg_read } for  pid=12265 comm="syz.6.5218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  150.500968][T12299] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5232'.
[  150.511444][T12299] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5232'.
[  150.536814][   T28] audit: type=1400 audit(1793273060.435:25243): avc:  denied  { watch watch_reads } for  pid=12302 comm="syz.9.5234" path="/proc/389/task" dev="proc" ino=82469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  151.274206][T12359] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  151.409843][T12373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5264'.
[  151.455458][T12378] fuse: Bad value for 'fd'
[  151.640975][T12403] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12403 comm=syz.6.5276
[  151.732512][T12411] tmpfs: Unknown parameter 'µ'
[  151.744647][   T43] device offline error, dev sda, sector 1147190 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  151.755265][   T43] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 143398)
[  151.767063][   T43] Buffer I/O error on device sda1, logical block 143360
[  151.774142][   T43] device offline error, dev sda, sector 1155334 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  151.784681][   T43] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 144416)
[  151.817657][   T43] Buffer I/O error on device sda1, logical block 144378
[  151.824674][   T43] Buffer I/O error on device sda1, logical block 144379
[  151.831615][   T43] Buffer I/O error on device sda1, logical block 144380
[  151.838767][   T43] Buffer I/O error on device sda1, logical block 144381
[  151.845803][   T43] Buffer I/O error on device sda1, logical block 144382
[  151.852815][   T43] Buffer I/O error on device sda1, logical block 144383
[  151.859869][   T43] device offline error, dev sda, sector 1159366 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  151.870421][   T43] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 144920)
[  151.882041][   T43] Buffer I/O error on device sda1, logical block 144882
[  151.889014][   T43] Buffer I/O error on device sda1, logical block 144883
[  151.896005][   T43] Buffer I/O error on device sda1, logical block 144884
[  151.903010][   T43] device offline error, dev sda, sector 1163574 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  151.913543][   T43] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2030 starting block 145446)
[  151.925143][   T43] device offline error, dev sda, sector 1171718 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2
[  151.935685][   T43] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2030 starting block 146464)
[  151.947294][   T43] device offline error, dev sda, sector 1175758 op 0x1:(WRITE) flags 0x0 phys_seg 11 prio class 2
[  151.958053][   T43] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2030 starting block 146969)
[  151.969730][   T43] device offline error, dev sda, sector 1179958 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  151.980265][   T43] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2032 starting block 147494)
[  151.991928][   T43] device offline error, dev sda, sector 1188110 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2
[  152.002519][   T43] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2032 starting block 148513)
[  152.014111][   T43] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2032 starting block 148514)
[  152.025717][   T43] device offline error, dev sda, sector 1192126 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  152.036254][   T43] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2032 starting block 149015)
[  152.047972][   T43] device offline error, dev sda, sector 1196342 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  152.060383][   T66] Buffer I/O error on dev sda1, logical block 131404, lost sync page write
[  152.069123][   T66] Aborting journal on device sda1-8.
[  152.074477][   T66] Buffer I/O error on dev sda1, logical block 131072, lost sync page write
[  152.083089][   T66] JBD2: I/O error when updating journal superblock for sda1-8.
[  152.125961][  T280] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  152.137218][  T280] EXT4-fs (sda1): Remounting filesystem read-only
[  152.145048][  T280] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  152.156229][  T280] EXT4-fs (sda1): Remounting filesystem read-only
[  152.156527][T12411] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  152.162696][  T280] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  152.179799][  T280] EXT4-fs (sda1): Remounting filesystem read-only
[  152.186284][  T280] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  152.197426][  T280] EXT4-fs (sda1): Remounting filesystem read-only
[  152.203892][  T280] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  152.215018][  T280] EXT4-fs (sda1): Remounting filesystem read-only
[  152.221455][  T280] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  152.232584][  T280] EXT4-fs (sda1): Remounting filesystem read-only
[  152.239023][  T280] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  152.250200][  T280] EXT4-fs (sda1): Remounting filesystem read-only
[  152.287651][T12377] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.5266: Detected aborted journal
[  152.298681][T12377] EXT4-fs (sda1): Remounting filesystem read-only
[  152.305246][T12377] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.5266: Detected aborted journal
[  152.316730][T12377] EXT4-fs (sda1): Remounting filesystem read-only
[  152.326482][  T280] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  152.337712][  T280] EXT4-fs (sda1): Remounting filesystem read-only
[  152.485725][T12432] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12432 comm=syz.9.5287
[  153.282786][   T43] device dummy0 left promiscuous mode
[  153.288299][   T43] bridge1: port 1(dummy0) entered disabled state
[  153.295345][   T43] device bridge_slave_1 left promiscuous mode
[  153.301489][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.308946][   T43] device bridge_slave_0 left promiscuous mode
[  153.315136][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.323367][   T43] device veth1_macvtap left promiscuous mode
[  153.330295][   T43] device veth0_vlan left promiscuous mode
[  153.787360][T12466] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12466 comm=syz.9.5299
[  155.930966][T12487] netlink: 'syz.1.5306': attribute type 16 has an invalid length.
[  155.938863][T12487] netlink: 'syz.1.5306': attribute type 17 has an invalid length.
[  155.946938][T12487] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  155.957391][T12487] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  155.970698][T12487] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  155.978174][T12487] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  155.985501][T12487] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  156.005055][T12487] tap0: tun_chr_ioctl cmd 1074025677
[  156.010356][T12487] tap0: Linktype set failed because interface is up
[  156.052730][T12455] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  156.082765][T12455] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  156.112594][T12455] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  156.222619][T12455] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  156.833895][T12494] loop9: detected capacity change from 0 to 256
[  156.852133][T12494] FAT-fs (loop9): Directory bread(block 64) failed
[  156.860183][T12494] FAT-fs (loop9): Directory bread(block 65) failed
[  156.866848][T12494] FAT-fs (loop9): Directory bread(block 66) failed
[  156.873844][T12494] FAT-fs (loop9): Directory bread(block 67) failed
[  156.880479][T12494] FAT-fs (loop9): Directory bread(block 68) failed
[  156.887447][T12494] FAT-fs (loop9): Directory bread(block 69) failed
[  156.894203][T12494] FAT-fs (loop9): Directory bread(block 70) failed
[  156.900725][T12494] FAT-fs (loop9): Directory bread(block 71) failed
[  156.907506][T12494] FAT-fs (loop9): Directory bread(block 72) failed
[  156.914238][T12494] FAT-fs (loop9): Directory bread(block 73) failed
[  156.931872][T12494] syz.9.5310: attempt to access beyond end of device
[  156.931872][T12494] loop9: rw=0, sector=1192, nr_sectors = 4 limit=256
[  156.946209][T12494] syz.9.5310: attempt to access beyond end of device
[  156.946209][T12494] loop9: rw=0, sector=1192, nr_sectors = 4 limit=256
[  156.952745][  T380] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  156.982614][  T380] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  157.033135][  T380] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  157.752595][  T380] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  157.828514][  T280] EXT4-fs error: 84 callbacks suppressed
[  157.828532][  T280] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  157.833627][T12499] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0
[  157.834534][  T280] EXT4-fs: 68 callbacks suppressed
[  157.834544][  T280] EXT4-fs (sda1): Remounting filesystem read-only
[  157.869073][  T280] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  157.872567][T12500] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.5312: Detected aborted journal
[  157.880431][  T280] EXT4-fs (sda1): Remounting filesystem read-only
[  157.891194][T12500] EXT4-fs (sda1): Remounting filesystem read-only
[  157.900322][  T280] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  157.906411][T12501] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.5313: Detected aborted journal
[  157.915606][  T280] EXT4-fs (sda1): Remounting filesystem read-only
[  157.926877][T12500] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.5312: Detected aborted journal
[  157.933532][T12501] EXT4-fs (sda1): Remounting filesystem read-only
[  157.946884][T12503] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.5314: Detected aborted journal
[  157.951838][T12501] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.5313: Detected aborted journal
[  157.961031][T12500] EXT4-fs (sda1): Remounting filesystem read-only
[  157.972185][T12501] EXT4-fs (sda1): Remounting filesystem read-only
[  157.978360][T12503] EXT4-fs (sda1): Remounting filesystem read-only
[  157.985305][T12501] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.5313: Detected aborted journal
[  157.993539][T12500] EXT4-fs (sda1): Remounting filesystem read-only
[  158.002318][T12501] EXT4-fs (sda1): Remounting filesystem read-only
[  159.051537][T12512] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  160.270931][T12517] bridge0: port 3(syz_tun) entered disabled state
[  160.282753][T12517] device syz_tun left promiscuous mode
[  160.288294][T12517] bridge0: port 3(syz_tun) entered disabled state
[  162.965109][  T280] EXT4-fs error: 39 callbacks suppressed
[  162.965127][  T280] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  162.970131][T12531] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0
[  162.970798][  T280] EXT4-fs: 29 callbacks suppressed
[  162.970806][  T280] EXT4-fs (sda1): Remounting filesystem read-only
[  163.005486][  T280] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  163.016631][  T280] EXT4-fs (sda1): Remounting filesystem read-only
[  163.023311][  T280] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  163.026419][T12532] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.5324: Detected aborted journal
[  163.034975][  T280] EXT4-fs (sda1): Remounting filesystem read-only
[  163.045555][T12532] EXT4-fs (sda1): Remounting filesystem read-only
[  163.057582][  T280] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  163.059230][T12533] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.5325: Detected aborted journal
[  163.069693][  T280] EXT4-fs (sda1): Remounting filesystem read-only
[  163.082962][T12534] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.5326: Detected aborted journal
[  163.087280][T12533] EXT4-fs (sda1): Remounting filesystem read-only
[  163.098305][T12532] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.5324: Detected aborted journal
[  163.106394][T12533] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.5325: Detected aborted journal
[  163.115952][T12534] EXT4-fs (sda1): Remounting filesystem read-only
[  163.126393][T12533] EXT4-fs (sda1): Remounting filesystem read-only
[  163.132674][T12532] EXT4-fs (sda1): Remounting filesystem read-only
[  163.139400][T12533] EXT4-fs (sda1): Remounting filesystem read-only
[  164.602653][T12545] netlink: 'syz.7.5329': attribute type 1 has an invalid length.
[  166.212768][T12551] device veth0 entered promiscuous mode
[  166.220802][T12551] device veth0 left promiscuous mode
[  166.240289][T12552] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  167.973778][T12562] EXT4-fs error: 57 callbacks suppressed
[  167.973794][T12562] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.5336: Detected aborted journal
[  167.984547][T12574] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0
[  167.991409][T12562] EXT4-fs: 37 callbacks suppressed
[  167.991421][T12562] EXT4-fs (sda1): Remounting filesystem read-only
[  168.016324][T12562] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.5336: Detected aborted journal
[  168.023396][T12575] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0
[  168.027562][T12562] EXT4-fs (sda1): Remounting filesystem read-only
[  168.045892][T12576] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0
[  168.048909][T12577] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.5338: Detected aborted journal
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: repeatedly failed to execute the program
proc=5 req=5298 state=1 status=67 (errno 9: Bad file descriptor)
[  168.069042][T12562] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.5336: Detected aborted journal
[  168.072534][   T28] audit: type=1400 audit(1793273077.955:25244): avc:  denied  { write } for  pid=280 comm="syz-executor" path="pipe:[14902]" dev="pipefs" ino=14902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  168.080591][T12562] EXT4-fs (sda1): Remounting filesystem read-only
[  168.109060][  T280] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  168.124849][  T280] EXT4-fs (sda1): Remounting filesystem read-only
[  168.130375][T12577] EXT4-fs (sda1): Remounting filesystem read-only
[  168.131320][  T280] EXT4-fs error (device sda1) in ext4_evict_inode:256: Journal has aborted
[  168.139110][T12577] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.5338: Detected aborted journal
[  168.153205][  T280] EXT4-fs (sda1): Remounting filesystem read-only
[  168.158833][T12562] EXT4-fs (sda1): Remounting filesystem read-only
[  168.204101][T12577] EXT4-fs (sda1): Remounting filesystem read-only
[  168.241992][ T5016] EXT4-fs (sda1): Remounting filesystem read-only
[  168.263281][ T5016] EXT4-fs (sda1): Remounting filesystem read-only
[  169.142931][  T365] device bridge_slave_1 left promiscuous mode
[  169.149111][  T365] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.156649][  T365] device bridge_slave_0 left promiscuous mode
[  169.162837][  T365] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.170591][  T365] device veth1_macvtap left promiscuous mode
[  169.176757][  T365] device veth0_vlan left promiscuous mode
[  169.933233][  T365] device bridge_slave_1 left promiscuous mode
[  169.939361][  T365] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.946894][  T365] device bridge_slave_0 left promiscuous mode
[  169.953085][  T365] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.960932][  T365] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.968442][  T365] device bridge_slave_0 left promiscuous mode
[  169.974764][  T365] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.982964][  T365] device veth1_macvtap left promiscuous mode
[  169.988996][  T365] device veth0_vlan left promiscuous mode
[  169.995171][  T365] device veth1_macvtap left promiscuous mode
[  170.001168][  T365] device veth0_vlan left promiscuous mode
[  176.473034][  T365] device bridge_slave_1 left promiscuous mode
[  176.479161][  T365] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.486567][  T365] device bridge_slave_0 left promiscuous mode
[  176.492729][  T365] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.500539][  T365] device veth1_macvtap left promiscuous mode
[  176.506614][  T365] device veth0_vlan left promiscuous mode