last executing test programs:

9.661038765s ago: executing program 4 (id=152):
openat(0xffffffffffffffff, 0x0, 0x80083, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c)
r1 = socket$igmp6(0xa, 0x3, 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

9.61606598s ago: executing program 3 (id=153):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./dev/sda\x00', 0x189d42, 0x198)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000002c0), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000300), 0x80002c1, 0x2, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x42c0)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000040, &(0x7f0000000540)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@noauto_da_alloc}]}, 0x1, 0x572, &(0x7f0000000600)="$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")
setns(r0, 0x40000000)
syz_mount_image$fuse(0x0, &(0x7f0000000b80)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x6, &(0x7f00000000c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f00000002c0)='GPL\x00', 0x5, 0x29e, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70)

8.452385049s ago: executing program 3 (id=157):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x589, &(0x7f0000003280)="$eJzs3c1rHOUfAPDvbF76+vs1hVLUgwR6sFK7aRJfKgitR9FiQe91SbahZNMt2U1pYqHtwYJ4kSKIWBD/AO8eizcv+lcUtFCkBD14icxmtt1ks9kk3bqp8/nAtM8zz2yeeeaZ59nv7MyyAeTWaPpPIeLFiPgyiTjUUjYYWeHo6nbLj65PpUsSKysf/ZFEkq1rbp9k/x/IMi9ExE+fRZwotNdbW1yaLVUq5fksP1afuzJWW1w6eWmuNFOeKV+emJw8/cbkxNtvvdmztr56/q9vPrz33ukvji1//cODw3eSOBsHs7LWdjyFm62Z0RjNjslQnF234XgPKttNku1tPvys9oPtGcjG+VCkc8ChGMhGPfDfdyMiVoCcSox/yKlmHNC8tu/RdfBz4+G7qxdA7e0fXP1sJPY2ro32LydrrozS692RHtSf1vHj73fvpEt0+RziRg/qA2i6eSsiTg0Ots9/STb/7dypxofHm1tfR97ef6Cf7qXxz2sbxT+Fx/FPbBD/HNhg7O5E9/FfeNCDajpK4793Nox/H09dIwNZ7n+NmG8ouXipUj4VEf+PiOMxtCfNb3Y/5/Ty/ZVOZa3xX7qk9TdjwWw/HgzuWfua6VK99DRtbvXwVsRLT+LfJNrm/72NWHd9/6fH43ya+OXzrnUcLd99uVNZ9/a36n0EvPJ9xCsb9v+TO1rJ5vcnxxrnw1jzrGj35+2jv3aqf3vt7720//dv3v6RpPV+bW37dXy39+9yp7Kdnv/DyceNdPNG4rVSvT4/HjGcfNC+fuLJa5v55vZp+48f23z+2+j83xcRn2yx/beP3O646W7o/+lt9f/2E/ff//TbTvVvrf9fb6SOZ2u2Mv9tdQef5tgBAAAAAADAblOIiIORFIqP04VCsbj6fMeR2F+oVGv1ExerC5eno/Fd2ZEYKjTvdB9qeR5iPHsetpmfWJefjIjDEfHVwL5GvjhVrUz3u/EAAAAAAAAAAAAAAAAAAACwSxzo8P3/1G8D/d474Jnzk9+QX13Hfy9+6QnYlbz/Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj/kl/EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAPXX+3Ll0WVl+dH0qzU9fXVyYrV49OV2uzRbnFqaKU9X5K8WZanWmUi5OVee6/b1KtXplfCIWro3Vy7X6WG1x6cJcdeFy/cKludJM+UJ56F9pFQAAAAAAAAAAAAAAAAAAADxfaotLs6VKpTzfj8TPhYj+1b7lxJnYFbux40TSrZfPZCfD2qLhtjVrEpElBp/VzicR0e9Dl+NEnycmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjxTwAAAP///b4wHA==")
syz_mount_image$fuse(0x0, &(0x7f0000003880)='./bus\x00', 0x220a05c, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000038c0)='./file0\x00', &(0x7f0000003900), 0x10000, &(0x7f0000003940)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f0000003980)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={<r1=>0x0, @private, @broadcast}, &(0x7f0000000100)=0xc)
r2 = creat(&(0x7f0000000140)='./file1\x00', 0xe4)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x7, 0x3, 0x3, 0x60000, r0, 0x0, '\x00', r1, r2, 0x2, 0x3, 0x0, 0x2}, 0x50)

8.43321012s ago: executing program 4 (id=158):
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000f00)='./proc\x00', &(0x7f0000000f40)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000f80)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
write(r0, &(0x7f0000000fc0)='2', 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
socket$can_bcm(0x1d, 0x2, 0x2)
unlink(0x0)
pipe(&(0x7f0000000240))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000000700000002"], 0x50)
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000e40), 0x8, 0x10, &(0x7f0000000e80), 0x10}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40042, 0x115)
write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000180)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000200)=ANY=[], 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r3, &(0x7f00000003c0)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000400)="13", 0x1, 0x4c0c3, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000440)=""/8, 0x8, 0x89100021, 0x0, 0x0)

8.235731s ago: executing program 4 (id=160):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x80, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYRES16=r0], 0x1, 0x1548, &(0x7f0000000200)="$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")
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001f40), 0x4)
r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000002640))
close_range(r2, 0xffffffffffffffff, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000002680), 0xcb12523c34b8d0b6, 0x0)
fgetxattr(r2, &(0x7f00000026c0)=@random={'system.', '\x00'}, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x4040050)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40050)
r3 = getpid()
sched_setaffinity(r3, 0x8, &(0x7f0000002600)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x181, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0)
preadv2(r6, &(0x7f0000002080)=[{&(0x7f0000002100)=""/75, 0x4b}, {&(0x7f0000002180)=""/237, 0xed}, {&(0x7f0000002280)=""/200, 0xc8}, {&(0x7f0000002380)=""/100, 0x64}, {0x0}, {0x0}, {&(0x7f0000002580)=""/74, 0x4a}], 0x7, 0xa7e, 0x3, 0x1c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000001c00)='./file0/file0\x00', 0x0)
getpid()
recvfrom$inet(r4, 0x0, 0x0, 0x100, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001c40)='./file1\x00', 0x1f1)
fstat(r1, &(0x7f0000000180))
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000001900)={{{@in6=@mcast1, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8)

8.231449971s ago: executing program 3 (id=161):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d530496e)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRES8=r1, @ANYRESDEC=0x0])
r2 = openat(0xffffffffffffff9c, &(0x7f000000b8c0)='./file0\x00', 0x183341, 0x0)
read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2a2840, &(0x7f0000000100)={[{@grpquota}, {@nombcache}]}, 0x3, 0xbbc, &(0x7f0000000940)="$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")
prlimit64(0x0, 0xe, &(0x7f0000001500)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001540)=0x8)
r3 = getpid()
personality(0xfe47fef9f5ff7379)
ppoll(0x0, 0x0, &(0x7f0000001580)={0x0, 0x989680}, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000015c0)=0x2)
sched_setscheduler(r3, 0x1, &(0x7f0000001600)=0x7)
mmap(&(0x7f00000c2000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x9a5ed000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000001680)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000001700), 0x651, 0x0)
recvmmsg(r4, &(0x7f0000001740), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1000002, 0x401d031, r2, 0x0)
syz_clone3(0x0, 0xffffffffffffff58)
pidfd_send_signal(0xffffffffffffffff, 0x1d, &(0x7f0000001780)={0x25, 0xc421, 0x1ff}, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000001800)='net/packet\x00')

7.809095614s ago: executing program 2 (id=163):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}], 0x1, 0x40000002, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901)
mount_setattr(r2, &(0x7f0000000300)='.\x00', 0x1000, &(0x7f0000000340)={0x0, 0x0, 0x100000, {r2}}, 0x20)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r3 = fsopen(&(0x7f0000000100)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x0, 0xa)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r6], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x59)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

7.806287435s ago: executing program 4 (id=164):
prlimit64(0x0, 0xe, &(0x7f0000001640)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001680)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000016c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001740)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000001780)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000001800), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000001840)=0x2)
recvmmsg(r1, &(0x7f0000001880), 0x80002c1, 0x2, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000018c0)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r3, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x14, r4, {0xb, 0xf}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_ACT={0x4}]}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24041090}, 0x0)
fchdir(0xffffffffffffffff)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000001ac0)='ns/pid\x00')
mount(0x0, &(0x7f0000001b00)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$bind(0x0, &(0x7f0000001b40)='./cgroup\x00', 0x0, 0x2108cff, 0x0)
getpid()
setns(0xffffffffffffffff, 0x24020000)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, <r6=>0x0})
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000001b80)='.\x00', 0x8100, &(0x7f0000001bc0)={0x0, 0x84, 0x40000, {r5}}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002dc0), 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x17, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000a000000000000000400000073110003400000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.475343162s ago: executing program 3 (id=168):
openat(0xffffffffffffffff, 0x0, 0x80083, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c)
r1 = socket$igmp6(0xa, 0x3, 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

5.290559911s ago: executing program 2 (id=169):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/60, 0x3c}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}], 0x2, 0x40000002, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901)
mount_setattr(r2, 0x0, 0x1000, 0x0, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r3 = fsopen(&(0x7f0000000100)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x0, 0xa)
inotify_init1(0x80000)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

4.863410814s ago: executing program 4 (id=171):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/60, 0x3c}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}], 0x2, 0x40000002, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901)
mount_setattr(r2, 0x0, 0x1000, 0x0, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r3 = fsopen(&(0x7f0000000100)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x0, 0xa)
inotify_init1(0x80000)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f2", @ANYRES64=r6], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

4.178983954s ago: executing program 4 (id=172):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x3000014, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000240), 0x80002c1, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000340), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000380)={0x0, 0x9, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="b7eb290aca"], 0x20000600}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020)
mount$cgroup(0x0, &(0x7f0000002480)='.\x00', &(0x7f00000024c0), 0x2208000, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x801)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4004800}, 0x0)
syz_emit_ethernet(0x35, &(0x7f00000025c0)=ANY=[@ANYBLOB="ffffffffffffaabbccddd3ff88ca5b500028003a000000000000010000d10000000000000000000000000100000011223344112233"], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000002600), 0x0, 0x0)
socket(0x11, 0x3, 0x0)
ioctl$VHOST_VDPA_SET_GROUP_ASID(r0, 0x4008af7c, &(0x7f0000002640)={0x0, 0x101})
syz_mount_image$ext4(&(0x7f0000005e80)='ext4\x00', &(0x7f0000005ec0)='./bus\x00', 0x10e, &(0x7f0000005f00)={[{@errors_remount}, {@stripe={'stripe', 0x3d, 0xb}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@delalloc}, {@usrquota}, {@grpjquota}, {@data_err_abort}, {@noinit_itable}, {@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@commit={'commit', 0x3d, 0x400009}}]}, 0x3, 0x467, &(0x7f0000006000)="$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")

4.138566748s ago: executing program 2 (id=173):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40c700, 0x198)
mkdirat(r0, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1fd)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_mtu(r1, 0x29, 0x50, 0x0, &(0x7f0000000180))
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r2 = openat$nsim_port_pp_hold(0xffffffffffffff9c, &(0x7f00000001c0)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x32}, 0x200, 0x0)
write$nsim_bool(r2, &(0x7f0000000200)='0', 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000240), 0x8, 0x242)
ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000280))
r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r4, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000c40)='ext4\x00', &(0x7f0000000c80)='./file0\x00', 0x3200002, &(0x7f0000000cc0)={[{@noquota}, {@quota}]}, 0x3, 0x610, &(0x7f0000000d00)="$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")
syz_mount_image$vfat(&(0x7f0000001340), &(0x7f0000001380)='./bus\x00', 0x0, 0x0, 0x5, 0x0, &(0x7f00000013c0))
chdir(&(0x7f0000001400)='./bus\x00')
r5 = open(&(0x7f0000001440)='.\x00', 0x8000, 0x14b)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000001480)=0x800001, 0x4)
socket$netlink(0x10, 0x3, 0x4)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f00000014c0)=@v1={0x0, @adiantum, 0x4, @desc4})

3.931991599s ago: executing program 2 (id=175):
syz_mount_image$ext4(&(0x7f00000012c0)='ext4\x00', &(0x7f0000001300)='./file0\x00', 0x200000, &(0x7f0000000000)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x401}}]}, 0x1, 0xbac, &(0x7f0000001640)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x80342, 0x168)
pwrite64(r1, &(0x7f0000000800)='2', 0xfdef, 0xfecc)
write$P9_RREADLINK(r0, &(0x7f0000002240)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)

3.918302391s ago: executing program 3 (id=176):
syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000000300)='./bus\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='utf8,umask=00000000000000000100003,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c696f636861727365743d6575632d6a702c6572726f72733d72656d6f756e742d726f2c757466382c666d61736b3d30303030303030303030303030303030303030303133332c646d61736b3d30303030303030303030303030303030303030303030332c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c00e7f7a64e12768f24588c031e3a7d52e686581692b31c66f5320a14e587a7c28feef0f667bc0421879f8dd03f06fa51770cf06aece55ad1185a9caffc331fae3067bf"], 0x3, 0x152b, &(0x7f0000000480)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000026c0)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002740), 0x4000087, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
rt_sigprocmask(0x0, &(0x7f0000002780)={[0xfffffffffffe]}, 0x0, 0x8)
r4 = gettid()
timer_create(0x2, &(0x7f00000027c0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000002800))
timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000002840)={{0x77359400}, {0x0, 0xe4c}}, 0x0)
rt_sigtimedwait(&(0x7f0000002880)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8)
connect$inet6(r3, &(0x7f00000028c0)={0xa, 0x4e24, 0xfffffffc}, 0x1c)
sendmmsg(r3, &(0x7f0000002900), 0x4ff, 0xfdff)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000002940)=ANY=[])
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2bb)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = syz_io_uring_setup(0xfab, &(0x7f0000000000)={0x0, 0x533f, 0x4, 0x0, 0x316}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100))
mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x1000000, 0x810, r5, 0x0)

3.886398724s ago: executing program 0 (id=177):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e)
io_setup(0x4, &(0x7f0000000380)=<r1=>0x0)
io_submit(r1, 0x0, &(0x7f00000003c0))
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

3.83141525s ago: executing program 1 (id=178):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000001c0)="fb845211924fd96032ee6665f24cd7c26412ca9fc4b79cc735dd87c6faa9767077ea681056921d50448850ed257fcd4bbf872d9d407d630c47e4b4b10db99e9b4d2080b2904869b3cf44129f534ee1a256663b9b", 0x54}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20080058)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
setresuid(0x0, 0xee00, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000780)={<r2=>0x0, @initdev, @dev}, &(0x7f00000007c0)=0xc)
sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f00000004c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000500)="78c4c07b89cd7fe362783b799d71e3c38b0bcf10a8c351b700488a8f8c64c256f66b62501ee2e6258fceb963d403b6bcf96abaa14fc59bb2c523496ac6e712ed722394db29d9797f42c25dcdccce2057f52002ded3c2f9a90f211219f5073e6ad7ae6f332d1f849e60050aa002296cd42bd45873b30f015c71588ed8985a7e3c9e876240f11dcbbe12be2e3abd07db38bb82af0854e141cc25d31900ad9a6bc1eb0f05b46cd71e30701aa6f1c274f79374e78211b4a20ce9f15d3d", 0xbb}, {&(0x7f0000000e40)="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", 0x14d}, {&(0x7f0000000680)="356a8e1f64194d824479036e4285187c322b84f44e36565057de05de6e5ea2a9f400b371532114964858fc326f5da1023beab0751e217711cbcd9754aef133d15ef01069de1d29dd197f9a8a9d660f6ba79a131701aad27fa30adb6470d65ac05728ca33f6235dcf841c5552a350be49f3fa6688fbd33d3e873bf201933e1bbe80ff230fb3631b9ff72e", 0x8a}], 0x3, &(0x7f0000000800)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010101, @multicast2}}}], 0x38}, 0x101)
capset(&(0x7f0000000400)={0x20080522}, &(0x7f0000000440)={0x200002, 0x200003, 0x803, 0x4, 0x8007})
r3 = fsopen(&(0x7f0000000480)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESDEC, @ANYRES16=r0, @ANYRES64=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES8=r0], 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
flock(r4, 0xa)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="9c000000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f000000001800020003"], 0x9c}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32, @ANYBLOB="0100000002"], 0x40)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a00)={r6, &(0x7f0000000a40), 0x0}, 0x20)

3.800071743s ago: executing program 1 (id=179):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}], 0x1, 0x40000002, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901)
mount_setattr(r2, &(0x7f0000000300)='.\x00', 0x1000, &(0x7f0000000340)={0x0, 0x0, 0x100000, {r2}}, 0x20)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r3 = fsopen(&(0x7f0000000100)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x0, 0xa)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

3.603927683s ago: executing program 0 (id=180):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}], 0x1, 0x40000002, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r2 = fsopen(&(0x7f0000000100)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fsmount(r2, 0x0, 0xa)
inotify_init1(0x80000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r5], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x59)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

3.602776393s ago: executing program 1 (id=181):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e)
io_setup(0x4, &(0x7f0000000380)=<r1=>0x0)
io_submit(r1, 0x0, &(0x7f00000003c0))
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

3.43535011s ago: executing program 2 (id=182):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x3000014, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000240), 0x80002c1, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000340), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000380)={0x0, 0x9, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="b7eb290aca"], 0x20000600}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020)
mount$cgroup(0x0, &(0x7f0000002480)='.\x00', &(0x7f00000024c0), 0x2208000, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x801)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4004800}, 0x0)
syz_emit_ethernet(0x35, &(0x7f00000025c0)=ANY=[@ANYBLOB="ffffffffffffaabbccddd3ff88ca5b500028003a000000000000010000d10000000000000000000000000100000011223344112233"], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000002600), 0x0, 0x0)
socket(0x11, 0x3, 0x0)
ioctl$VHOST_VDPA_SET_GROUP_ASID(r0, 0x4008af7c, &(0x7f0000002640)={0x0, 0x101})
syz_mount_image$ext4(&(0x7f0000005e80)='ext4\x00', &(0x7f0000005ec0)='./bus\x00', 0x10e, &(0x7f0000005f00)={[{@errors_remount}, {@stripe={'stripe', 0x3d, 0xb}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@delalloc}, {@usrquota}, {@grpjquota}, {@data_err_abort}, {@noinit_itable}, {@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@commit={'commit', 0x3d, 0x400009}}]}, 0x3, 0x467, &(0x7f0000006000)="$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")

3.313520982s ago: executing program 0 (id=183):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/60, 0x3c}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}], 0x2, 0x40000002, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901)
mount_setattr(r2, 0x0, 0x1000, 0x0, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r3 = fsopen(&(0x7f0000000100)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x0, 0xa)
inotify_init1(0x80000)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

3.289985285s ago: executing program 1 (id=184):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d530496e)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRES8=r1, @ANYRESDEC=0x0])
r2 = openat(0xffffffffffffff9c, &(0x7f000000b8c0)='./file0\x00', 0x183341, 0x0)
read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2a2840, &(0x7f0000000100)={[{@grpquota}, {@nombcache}]}, 0x3, 0xbbc, &(0x7f0000000940)="$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")
prlimit64(0x0, 0xe, &(0x7f0000001500)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001540)=0x8)
r3 = getpid()
personality(0xfe47fef9f5ff7379)
ppoll(0x0, 0x0, &(0x7f0000001580)={0x0, 0x989680}, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000015c0)=0x2)
sched_setscheduler(r3, 0x1, &(0x7f0000001600)=0x7)
mmap(&(0x7f00000c2000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x9a5ed000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000001680)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000001700), 0x651, 0x0)
recvmmsg(r4, &(0x7f0000001740), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1000002, 0x401d031, r2, 0x0)
pidfd_send_signal(0xffffffffffffffff, 0x1d, &(0x7f0000001780)={0x25, 0xc421, 0x1ff}, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000001800)='net/packet\x00')

3.103386294s ago: executing program 0 (id=185):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d530496e)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRES8=r1, @ANYRESDEC=0x0])
r2 = openat(0xffffffffffffff9c, &(0x7f000000b8c0)='./file0\x00', 0x183341, 0x0)
read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2a2840, &(0x7f0000000100)={[{@grpquota}, {@nombcache}]}, 0x3, 0xbbc, &(0x7f0000000940)="$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")
prlimit64(0x0, 0xe, &(0x7f0000001500)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001540)=0x8)
r3 = getpid()
personality(0xfe47fef9f5ff7379)
ppoll(0x0, 0x0, &(0x7f0000001580)={0x0, 0x989680}, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000015c0)=0x2)
sched_setscheduler(r3, 0x1, &(0x7f0000001600)=0x7)
mmap(&(0x7f00000c2000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x9a5ed000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000001680)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000001700), 0x651, 0x0)
recvmmsg(r4, &(0x7f0000001740), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1000002, 0x401d031, r2, 0x0)
syz_clone3(0x0, 0xffffffffffffff58)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000001800)='net/packet\x00')

3.032005981s ago: executing program 3 (id=186):
openat(0xffffffffffffffff, 0x0, 0x80083, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c)
r1 = socket$igmp6(0xa, 0x3, 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

787.22351ms ago: executing program 0 (id=187):
r0 = open(&(0x7f0000001440)='.\x00', 0x8000, 0x14b)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000014c0)=@v1={0x0, @adiantum, 0x4, @desc4})

786.66672ms ago: executing program 1 (id=188):
write$tcp_mem(0xffffffffffffffff, &(0x7f0000000b80)={0x3ff, 0x20, 0x0, 0x20, 0x8000}, 0x48)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x2800700, &(0x7f0000000580)={[], [{@seclabel}]}, 0x2, 0x460, &(0x7f00000005c0)="$eJzs289vFFUcAPDvTH8gP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDHui2EUKihNRFCpBqDFxNDomfj0cS/wJsXo55MvOrdkBDtBfRUM7MzZTvuthS23cJ+Psm27+28nfe+O/Nm3sybDaBrDWV/kogdEfF7RAzUs8sLDNX/XV+4UPtn4UIticXFt/9K8nLXFi7UyqLl57YXmeE0Iv00KSpZbvbc+VMT09NTZ4v86Nzp90dnz51/7uTpiRNTJ6bOjB85cvjQ2IsvjD/fljizuK7t+2hm/97X3738Ru3Y5fd+/i5r745i+bWFvlpbKmowlAX+92KuuuzJdlfWYTsb0klvBxvCmvRERLa5+vL+PxA9cWPjDcRrn3S0ccC6ys5NW1ovnl8E7mJJdLoFQGeUJ/rsOr58bdDQY1O4+nL9AiiL+3rxqi/pjbQo01e5vm2noYg4Nv/v19krKvdTAADWw+e1r47Gs83Gf2k80FBuVzGHMhgR90bE7oi4LyL2RMT9EXnZByPioTXWX50a+v/4J71yS4HdpGz891Ixt7V8/FeO/mKwp8jtzOPvS46fnJ46WHwnw9G3JcuPrVDHD6/+9kWrZY3jv+yV1V+OBYt2XOmt3KCbnJibyAelbXD144h9vc3iT5ZmApKI2BsR+9a26l1l4uTT3+5vVWj1+FfQhnmmxW8inqpv//moxF9KVp6fHL0npqcOjpZ7RYPB+r9ffr30Vqv6byv+Nsi2/7bl+3+1yGDSOF87u/o600r+0h+ftbymudX9vz95Jz8e9RfvfTgxN3d2LKI/OZrnl70/fuOzZb4sn8U/fKB5/99dfCaL/+GIyHbiRyLi0Yh4rGj74xHxREQcWOH7+OmV1ss2w/afbHr8W9r/K9t/7YmeUz9+36r+pfh7Y4XtfzhPDRfv5Me/VdxsA2/nuwMAAIA7RZo/A5+kI0vpNB0ZqT/Dvye2pdMzs3PPHJ/54Mxk/Vn5wehLyztdAw33Q8eS+WKN9fx4cfurXH6ouG/8Zc/WPD9Sm5me7HDs0O22t+j/mT97Ot06YN01m0cb7+9AQ4ANV+3/lQnci29uZGOADeX32tC9Vun/1ee5gLuI8z90r2b9/2Ilby4A7k7O/9C99H/oXvo/dC/9H7rS7fyu/45MlMe6zdKeOzYR6aZoRtcntsb6rLnDByYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA2+S8AAP//SMHotQ==")
mount$incfs(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x404, 0x0)
syz_mount_image$fuse(&(0x7f0000000b00), &(0x7f0000000b40)='./file0\x00', 0x820, &(0x7f0000000b80)=ANY=[], 0x0, 0xc0ed0000, 0x0)

669.807932ms ago: executing program 0 (id=189):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x8201)
ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0))
prlimit64(0x0, 0xe, &(0x7f0000008300)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000008340)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000083c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000008400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000008440)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000084c0), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000008500), 0x4000087, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
unshare(0x22020600)
gettid()
socket$tipc(0x1e, 0x2, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r5], 0x34}}, 0x0)

491.25075ms ago: executing program 1 (id=190):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e)
io_setup(0x4, &(0x7f0000000380)=<r1=>0x0)
io_submit(r1, 0x0, &(0x7f00000003c0))
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

0s ago: executing program 2 (id=191):
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x101c08a, &(0x7f0000000cc0)={[{@fat=@check_normal}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@numtail}, {@uni_xlate}, {@uni_xlateno}, {@shortname_lower}, {@utf8no}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@fat=@tz_utc}, {@shortname_win95}, {@rodir}, {@fat=@nfs_nostale_ro}, {@rodir}, {@fat=@dos1xfloppy}, {@shortname_winnt}, {}]}, 0x6, 0x2c8, &(0x7f0000000dc0)="$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")
socket$netlink(0x10, 0x3, 0x8000000004) (async)
r1 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) (async, rerun: 32)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000240)=0xffffffc3, 0x4) (async, rerun: 32)
sendmmsg(r1, &(0x7f0000000280)=[{{&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x13}, 0x200, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r1], 0x108}}], 0x1, 0xc040) (async)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x8) (async)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000500)={@multicast2, @loopback}, 0xc) (async)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) (async, rerun: 64)
sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x8) (async, rerun: 64)
sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) (async, rerun: 32)
r3 = getpid() (rerun: 32)
sched_setscheduler(r3, 0x1, &(0x7f0000000640)=0x5) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000b40), 0x318, 0x0)
recvmmsg(r4, &(0x7f0000000b80), 0x10106, 0x2, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000bc0)={'macsec0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0x2424, 0x4822}, [@IFLA_NET_NS_PID={0x8, 0x13, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x0) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x13, &(0x7f0000000400)=@framed={{0x18, 0x8, 0x0, 0x0, 0x5b}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x66, 0x0, 0x0, 0x0, 0x700}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8}, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000540)='GPL\x00', 0x2, 0xde, &(0x7f0000000740)=""/222}, 0x94) (rerun: 64)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts.
[   28.449219][   T30] audit: type=1400 audit(1794299677.964:64): avc:  denied  { mounton } for  pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   28.450245][  T277] cgroup: Unknown subsys name 'net'
[   28.471876][   T30] audit: type=1400 audit(1794299677.964:65): avc:  denied  { mount } for  pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.499158][   T30] audit: type=1400 audit(1794299677.994:66): avc:  denied  { unmount } for  pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.499313][  T277] cgroup: Unknown subsys name 'devices'
[   28.613717][  T277] cgroup: Unknown subsys name 'hugetlb'
[   28.619318][  T277] cgroup: Unknown subsys name 'rlimit'
[   28.755899][   T30] audit: type=1400 audit(1794299678.274:67): avc:  denied  { setattr } for  pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   28.779217][   T30] audit: type=1400 audit(1794299678.274:68): avc:  denied  { mounton } for  pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   28.804181][   T30] audit: type=1400 audit(1794299678.274:69): avc:  denied  { mount } for  pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   28.810104][  T280] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   28.836363][   T30] audit: type=1400 audit(1794299678.354:70): avc:  denied  { relabelto } for  pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   28.861922][   T30] audit: type=1400 audit(1794299678.354:71): avc:  denied  { write } for  pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   28.894620][   T30] audit: type=1400 audit(1794299678.414:72): avc:  denied  { read } for  pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   28.920708][   T30] audit: type=1400 audit(1794299678.414:73): avc:  denied  { open } for  pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   28.920734][  T277] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   29.467151][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.474479][  T286] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.481968][  T286] device bridge_slave_0 entered promiscuous mode
[   29.489679][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.497170][  T286] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.504552][  T286] device bridge_slave_1 entered promiscuous mode
[   29.591033][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.598156][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.605524][  T288] device bridge_slave_0 entered promiscuous mode
[   29.613676][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.620736][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.628251][  T288] device bridge_slave_1 entered promiscuous mode
[   29.634795][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.641917][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.649187][  T290] device bridge_slave_0 entered promiscuous mode
[   29.668030][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.675119][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.682543][  T290] device bridge_slave_1 entered promiscuous mode
[   29.712947][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.720010][  T287] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.727471][  T287] device bridge_slave_0 entered promiscuous mode
[   29.734306][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.741347][  T287] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.748899][  T287] device bridge_slave_1 entered promiscuous mode
[   29.772529][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.779598][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.787056][  T289] device bridge_slave_0 entered promiscuous mode
[   29.796671][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.803783][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.811188][  T289] device bridge_slave_1 entered promiscuous mode
[   29.962612][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.969654][  T286] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.977053][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.984098][  T286] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.992386][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.999432][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.006719][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.013762][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.040516][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.047603][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.054893][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.062091][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.075562][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.082642][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.089907][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.096955][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.108436][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.115515][  T287] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.122820][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.129844][  T287] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.149440][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.156774][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.164224][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   30.171982][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.179130][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.186396][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.193649][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.200812][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.208074][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.215303][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.222531][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.235326][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   30.243073][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   30.267605][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   30.275804][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.282954][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.290314][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   30.299407][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.306480][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.314819][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   30.336398][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   30.344031][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   30.352507][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.359532][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.367578][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   30.375781][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.382826][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.390146][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   30.398368][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.405419][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.427727][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   30.435589][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   30.443671][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   30.452195][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   30.460154][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   30.468473][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.475548][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.483088][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   30.491196][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.498271][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.505714][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   30.527430][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   30.536073][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   30.544318][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   30.552353][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   30.559820][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   30.568310][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   30.576636][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   30.584981][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   30.593106][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.600136][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.612393][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   30.620745][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   30.629190][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.636259][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.643641][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   30.652273][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   30.660467][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.667502][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.674821][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   30.682854][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   30.691580][  T287] device veth0_vlan entered promiscuous mode
[   30.715302][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   30.723243][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   30.731143][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   30.739261][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   30.747441][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   30.755705][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   30.763807][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   30.771909][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   30.779754][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   30.788048][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   30.796381][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   30.803933][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   30.812136][  T288] device veth0_vlan entered promiscuous mode
[   30.825038][  T286] device veth0_vlan entered promiscuous mode
[   30.833140][  T287] device veth1_macvtap entered promiscuous mode
[   30.843265][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   30.851512][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   30.860141][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   30.868298][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   30.876830][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   30.884905][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   30.892899][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   30.900780][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   30.909270][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   30.917795][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   30.925377][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   30.940219][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   30.948644][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   30.957103][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   30.965524][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   30.977849][  T289] device veth0_vlan entered promiscuous mode
[   30.984908][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   30.992951][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   31.005334][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   31.012965][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   31.031106][  T288] device veth1_macvtap entered promiscuous mode
[   31.038686][  T287] request_module fs-gadgetfs succeeded, but still no fs?
[   31.047935][  T290] device veth0_vlan entered promiscuous mode
[   31.058685][  T286] device veth1_macvtap entered promiscuous mode
[   31.068252][  T289] device veth1_macvtap entered promiscuous mode
[   31.075759][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   31.084146][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   31.086533][  T310] ip_tables: iptables: counters copy to user failed while replacing table
[   31.093405][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   31.108511][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   31.116788][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   31.125002][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   31.132763][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   31.141122][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   31.149590][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   31.157609][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   31.165895][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   31.174439][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   31.182958][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   31.190531][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   31.198127][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   31.213486][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   31.222159][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   31.230570][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   31.234742][  T313] FAULT_INJECTION: forcing a failure.
[   31.234742][  T313] name failslab, interval 1, probability 0, space 0, times 1
[   31.239021][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   31.252477][  T313] CPU: 1 PID: 313 Comm: syz.4.7 Not tainted syzkaller #0
[   31.260251][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   31.266959][  T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   31.266970][  T313] Call Trace:
[   31.266976][  T313]  <TASK>
[   31.266982][  T313]  __dump_stack+0x21/0x30
[   31.275274][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   31.285018][  T313]  dump_stack_lvl+0x110/0x170
[   31.285044][  T313]  ? show_regs_print_info+0x20/0x20
[   31.313503][  T313]  dump_stack+0x15/0x20
[   31.317672][  T313]  should_fail+0x3ab/0x500
[   31.322087][  T313]  __should_failslab+0xa4/0xe0
[   31.326839][  T313]  should_failslab+0x9/0x20
[   31.331333][  T313]  slab_pre_alloc_hook+0x39/0xd0
[   31.336273][  T313]  ? __d_alloc+0x2d/0x690
[   31.340600][  T313]  kmem_cache_alloc+0x44/0x260
[   31.345422][  T313]  __d_alloc+0x2d/0x690
[   31.349589][  T313]  d_alloc_pseudo+0x1d/0x70
[   31.354094][  T313]  alloc_file_pseudo+0xe0/0x200
[   31.358969][  T313]  ? alloc_empty_file_noaccount+0x80/0x80
[   31.364675][  T313]  ? alloc_anon_inode+0x225/0x300
[   31.369688][  T313]  ? memcpy+0x56/0x70
[   31.373659][  T313]  ? alloc_anon_inode+0x225/0x300
[   31.378671][  T313]  aio_setup_ring+0x1f2/0xba0
[   31.383337][  T313]  ? free_ioctx_reqs+0x160/0x160
[   31.388276][  T313]  ioctx_alloc+0x31d/0x6d0
[   31.392679][  T313]  __se_sys_io_setup+0x6f/0x220
[   31.397526][  T313]  __x64_sys_io_setup+0x5b/0x70
[   31.402361][  T313]  x64_sys_call+0x767/0x9a0
[   31.406854][  T313]  do_syscall_64+0x4c/0xa0
[   31.411260][  T313]  ? clear_bhb_loop+0x50/0xa0
[   31.415923][  T313]  ? clear_bhb_loop+0x50/0xa0
[   31.420589][  T313]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   31.426468][  T313] RIP: 0033:0x7ff51d6bbf19
[   31.430873][  T313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   31.450741][  T313] RSP: 002b:00007ff51c10a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[   31.459270][  T313] RAX: ffffffffffffffda RBX: 00007ff51d938fa0 RCX: 00007ff51d6bbf19
[   31.467247][  T313] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[   31.475205][  T313] RBP: 00007ff51d74af6d R08: 0000000000000000 R09: 0000000000000000
[   31.483163][  T313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   31.491206][  T313] R13: 00007ff51d939038 R14: 00007ff51d938fa0 R15: 00007ffe0f89f448
[   31.499341][  T313]  </TASK>
[   31.524152][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   31.533423][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   31.540286][  T317] loop4: detected capacity change from 0 to 512
[   31.542092][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   31.556038][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   31.570641][  T290] device veth1_macvtap entered promiscuous mode
[   31.589317][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   31.597789][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   31.606407][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   31.615347][  T317] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[   31.622113][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   31.622939][  T317] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[   31.638351][  T317] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   31.651500][  T317] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   31.664600][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   31.673181][  T317] EXT4-fs (loop4): 1 truncate cleaned up
[   31.679232][  T317] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,mblk_io_submit,,errors=continue. Quota mode: none.
[   31.679282][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   31.704139][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   31.718180][  T322] loop2: detected capacity change from 0 to 512
[   31.722397][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   31.738879][  T328] loop1: detected capacity change from 0 to 4096
[   31.771873][  T322] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22
[   31.798065][  T322] EXT4-fs (loop2): Mount option "data=journal" incompatible with ext2
[   31.820363][  T328] EXT4-fs (loop1): Ignoring removed nobh option
[   31.839347][  T328] EXT4-fs (loop1): Test dummy encryption mode enabled
[   31.855385][  T328] EXT4-fs (loop1): Ignoring removed bh option
[   31.883165][  T328] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback.
[   31.924493][  T338] loop3: detected capacity change from 0 to 512
[   32.089456][  T338] xt_CT: No such helper "pptp"
[   32.147526][  T338] syz.3.10 (338) used greatest stack depth: 21800 bytes left
[   32.197158][  T330] loop0: detected capacity change from 0 to 256
[   32.563670][  T354] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   32.592970][  T356] loop4: detected capacity change from 0 to 2048
[   32.619519][  T354] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   32.660707][  T356] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   32.671982][  T356] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   32.715430][  T356] overlayfs: failed to verify upper (/file0, ino=12, err=-28)
[   32.723011][  T356] overlayfs: failed to verify index dir 'upper' xattr
[   32.729952][  T356] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[   32.761078][  T365] device macsec0 entered promiscuous mode
[   32.762562][  T367] FAULT_INJECTION: forcing a failure.
[   32.762562][  T367] name failslab, interval 1, probability 0, space 0, times 0
[   32.781954][  T367] CPU: 0 PID: 367 Comm: syz.0.19 Not tainted syzkaller #0
[   32.789188][  T367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   32.799256][  T367] Call Trace:
[   32.802530][  T367]  <TASK>
[   32.805451][  T367]  __dump_stack+0x21/0x30
[   32.809775][  T367]  dump_stack_lvl+0x110/0x170
[   32.814441][  T367]  ? show_regs_print_info+0x20/0x20
[   32.819894][  T367]  dump_stack+0x15/0x20
[   32.824049][  T367]  should_fail+0x3ab/0x500
[   32.828766][  T367]  __should_failslab+0xa4/0xe0
[   32.833546][  T367]  should_failslab+0x9/0x20
[   32.838112][  T367]  slab_pre_alloc_hook+0x39/0xd0
[   32.843056][  T367]  ? __d_alloc+0x2d/0x690
[   32.847383][  T367]  kmem_cache_alloc+0x44/0x260
[   32.852147][  T367]  __d_alloc+0x2d/0x690
[   32.856403][  T367]  d_alloc_pseudo+0x1d/0x70
[   32.860914][  T367]  alloc_file_pseudo+0xe0/0x200
[   32.865765][  T367]  ? alloc_empty_file_noaccount+0x80/0x80
[   32.871475][  T367]  ? __kasan_check_write+0x14/0x20
[   32.876728][  T367]  ? clear_nlink+0x8a/0xe0
[   32.881160][  T367]  __shmem_file_setup+0x1df/0x2b0
[   32.886266][  T367]  shmem_file_setup+0x2f/0x40
[   32.890945][  T367]  __se_sys_memfd_create+0x1de/0x3c0
[   32.896227][  T367]  __x64_sys_memfd_create+0x5b/0x70
[   32.901567][  T367]  x64_sys_call+0x473/0x9a0
[   32.906072][  T367]  do_syscall_64+0x4c/0xa0
[   32.910492][  T367]  ? clear_bhb_loop+0x50/0xa0
[   32.915171][  T367]  ? clear_bhb_loop+0x50/0xa0
[   32.919838][  T367]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   32.925720][  T367] RIP: 0033:0x7f9e5ec42f19
[   32.930148][  T367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   32.949842][  T367] RSP: 002b:00007f9e5d690e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   32.958262][  T367] RAX: ffffffffffffffda RBX: 00000000000004f0 RCX: 00007f9e5ec42f19
[   32.966238][  T367] RDX: 00007f9e5d690ee0 RSI: 0000000000000000 RDI: 00007f9e5ecd2160
[   32.974588][  T367] RBP: 0000200000000180 R08: 00000000ffffffff R09: 0000000000000000
[   32.982913][  T367] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000080
[   32.990959][  T367] R13: 00007f9e5d690ee0 R14: 00007f9e5d690ea0 R15: 00002000000000c0
[   32.999014][  T367]  </TASK>
[   33.044142][  T377] loop2: detected capacity change from 0 to 512
[   33.086577][  T383] loop3: detected capacity change from 0 to 1024
[   33.100606][  T387] FAULT_INJECTION: forcing a failure.
[   33.100606][  T387] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   33.113893][  T387] CPU: 1 PID: 387 Comm: syz.4.28 Not tainted syzkaller #0
[   33.121117][  T387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   33.131193][  T387] Call Trace:
[   33.134508][  T387]  <TASK>
[   33.137463][  T387]  __dump_stack+0x21/0x30
[   33.141818][  T387]  dump_stack_lvl+0x110/0x170
[   33.146535][  T387]  ? show_regs_print_info+0x20/0x20
[   33.151766][  T387]  dump_stack+0x15/0x20
[   33.156009][  T387]  should_fail+0x3ab/0x500
[   33.160502][  T387]  should_fail_alloc_page+0x55/0x80
[   33.165688][  T387]  prepare_alloc_pages+0x13f/0x590
[   33.170801][  T387]  ? __alloc_pages_bulk+0xab0/0xab0
[   33.175989][  T387]  __alloc_pages+0x11d/0x460
[   33.180590][  T387]  ? zone_watermark_fast+0x250/0x250
[   33.185863][  T387]  ? rt6_multipath_hash+0xf90/0x1860
[   33.191136][  T387]  new_slab+0xa0/0x4d0
[   33.195204][  T387]  ___slab_alloc+0x3ac/0x840
[   33.199787][  T387]  ? fib6_table_lookup+0x8a4/0x9e0
[   33.204896][  T387]  ? dst_alloc+0x15c/0x1d0
[   33.209345][  T387]  ? dst_alloc+0x15c/0x1d0
[   33.213753][  T387]  __slab_alloc+0x49/0x90
[   33.218073][  T387]  ? dst_alloc+0x15c/0x1d0
[   33.222478][  T387]  kmem_cache_alloc+0x138/0x260
[   33.227326][  T387]  ? fib6_select_path+0x103/0x620
[   33.232340][  T387]  ? ipv6_sysctl_rtcache_flush+0x100/0x100
[   33.238134][  T387]  dst_alloc+0x15c/0x1d0
[   33.242363][  T387]  ip6_pol_route+0xa07/0x1210
[   33.247034][  T387]  ? fib6_table_lookup+0x9e0/0x9e0
[   33.252136][  T387]  ip6_pol_route_input+0x56/0x80
[   33.257065][  T387]  fib6_rule_lookup+0x20a/0x5d0
[   33.261905][  T387]  ? ip6_route_input_lookup+0xd0/0xd0
[   33.267355][  T387]  ? fib6_lookup+0x2c0/0x2c0
[   33.272023][  T387]  ? ip6t_do_table+0x1355/0x1510
[   33.277058][  T387]  ip6_route_input+0x5fd/0x8c0
[   33.281826][  T387]  ? ip6_multipath_l3_keys+0x5c0/0x5c0
[   33.287295][  T387]  ? sk_setup_caps+0x400/0x400
[   33.292047][  T387]  ? ip6table_mangle_table_init+0x60/0x60
[   33.297751][  T387]  ip6_rcv_finish+0x156/0x360
[   33.302431][  T387]  ipv6_rcv+0xed/0x230
[   33.306521][  T387]  ? x64_sys_call+0x8ef/0x9a0
[   33.311194][  T387]  ? do_syscall_64+0x4c/0xa0
[   33.315786][  T387]  ? ip6_rcv_finish+0x360/0x360
[   33.320642][  T387]  ? refcount_add+0x80/0x80
[   33.325134][  T387]  ? ip6_rcv_finish+0x360/0x360
[   33.329976][  T387]  __netif_receive_skb+0xc8/0x280
[   33.335003][  T387]  netif_receive_skb+0x98/0x3e0
[   33.339957][  T387]  ? netif_receive_skb_core+0x100/0x100
[   33.345493][  T387]  ? slab_post_alloc_hook+0x6d/0x2b0
[   33.350767][  T387]  tun_rx_batched+0x600/0x750
[   33.355433][  T387]  ? local_bh_enable+0x30/0x30
[   33.360189][  T387]  tun_get_user+0x2809/0x33e0
[   33.364863][  T387]  ? msr_save_cpuid_features+0xb0/0xd0
[   33.370313][  T387]  ? tun_do_read+0x1d70/0x1d70
[   33.375069][  T387]  ? kstrtouint_from_user+0x1c4/0x220
[   33.380436][  T387]  ? kstrtol_from_user+0x2a0/0x2a0
[   33.385538][  T387]  ? avc_policy_seqno+0x1b/0x70
[   33.390405][  T387]  ? selinux_file_permission+0x2aa/0x510
[   33.396060][  T387]  tun_chr_write_iter+0x1ed/0x2f0
[   33.401094][  T387]  vfs_write+0x831/0xfd0
[   33.405331][  T387]  ? file_end_write+0x1b0/0x1b0
[   33.410172][  T387]  ? __fget_files+0x2e1/0x340
[   33.415031][  T387]  ? __fdget_pos+0x1f7/0x380
[   33.419618][  T387]  ? ksys_write+0x70/0x260
[   33.424025][  T387]  ksys_write+0x14a/0x260
[   33.428343][  T387]  ? __ia32_sys_read+0x90/0x90
[   33.433099][  T387]  ? debug_smp_processor_id+0x17/0x20
[   33.438461][  T387]  __x64_sys_write+0x7b/0x90
[   33.441735][   T60] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   33.443042][  T387]  x64_sys_call+0x8ef/0x9a0
[   33.455168][  T387]  do_syscall_64+0x4c/0xa0
[   33.459577][  T387]  ? clear_bhb_loop+0x50/0xa0
[   33.464252][  T387]  ? clear_bhb_loop+0x50/0xa0
[   33.469007][  T387]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   33.474888][  T387] RIP: 0033:0x7ff51d67c74e
[   33.479300][  T387] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   33.498989][  T387] RSP: 002b:00007ff51c109fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   33.507659][  T387] RAX: ffffffffffffffda RBX: 00007ff51c10a6c0 RCX: 00007ff51d67c74e
[   33.515620][  T387] RDX: 000000000000006e RSI: 00002000000005c0 RDI: 00000000000000c8
[   33.523678][  T387] RBP: 00007ff51c10a090 R08: 0000000000000000 R09: 0000000000000000
[   33.531653][  T387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   33.539724][  T387] R13: 00007ff51d939038 R14: 00007ff51d938fa0 R15: 00007ffe0f89f448
[   33.547709][  T387]  </TASK>
[   33.561248][  T377] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22
[   33.571973][  T383] =======================================================
[   33.571973][  T383] WARNING: The mand mount option has been deprecated and
[   33.571973][  T383]          and is ignored by this kernel. Remove the mand
[   33.571973][  T383]          option from the mount to silence this warning.
[   33.571973][  T383] =======================================================
[   33.608353][  T383] EXT4-fs (loop3): Ignoring removed nobh option
[   33.614960][  T383] EXT4-fs (loop3): Ignoring removed bh option
[   33.621215][  T383] EXT4-fs (loop3): Ignoring removed nobh option
[   33.636724][  T377] EXT4-fs (loop2): Invalid want_extra_isize 201
[   33.654635][  T383] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000007,nolazytime,debug_want_extra_isize=0x0000000000000080,sb=0x0000000000000004,max_batch_time=0x000000000000008d,delalloc,bh,nombcache,auto_da_alloc,nobh,,errors=continue. Quota mode: none.
[   33.691653][   T30] kauditd_printk_skb: 82 callbacks suppressed
[   33.691669][   T30] audit: type=1400 audit(1794299683.204:156): avc:  denied  { read write } for  pid=382 comm="syz.3.26" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   33.701035][  T383] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.26: bg 0: block 224: padding at end of block bitmap is not set
[   33.720754][   T30] audit: type=1400 audit(1794299683.204:157): avc:  denied  { open } for  pid=382 comm="syz.3.26" path="/3/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   33.757305][   T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   33.765360][  T395] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   33.818546][   T30] audit: type=1400 audit(1794299683.334:158): avc:  denied  { unmount } for  pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   33.851082][   T30] audit: type=1400 audit(1794299683.364:159): avc:  denied  { create } for  pid=400 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   33.871101][   T30] audit: type=1400 audit(1794299683.364:160): avc:  denied  { bind } for  pid=400 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   33.891765][   T30] audit: type=1400 audit(1794299683.394:161): avc:  denied  { name_bind } for  pid=404 comm="syz.3.34" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   33.916883][   T30] audit: type=1400 audit(1794299683.394:162): avc:  denied  { node_bind } for  pid=404 comm="syz.3.34" saddr=::ffff:127.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   33.939450][   T30] audit: type=1400 audit(1794299683.434:163): avc:  denied  { mount } for  pid=404 comm="syz.3.34" name="/" dev="configfs" ino=13670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   33.963007][   T60] usb 2-1: unable to get BOS descriptor or descriptor too short
[   33.982631][  T412] loop3: detected capacity change from 0 to 512
[   34.001783][   T60] usb 2-1: not running at top speed; connect to a high speed hub
[   34.012632][  T412] EXT4-fs (loop3): Ignoring removed nobh option
[   34.021472][  T412] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.36: invalid indirect mapped block 256 (level 2)
[   34.035068][  T412] EXT4-fs (loop3): 2 truncates cleaned up
[   34.040808][  T412] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback.
[   34.054597][  T279] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   34.161854][   T26] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[   34.171944][   T26] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[   34.237226][   T30] audit: type=1400 audit(1794299683.754:165): avc:  denied  { create } for  pid=416 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   34.241750][   T60] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[   34.257050][   T30] audit: type=1400 audit(1794299683.754:164): avc:  denied  { create } for  pid=416 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   34.278875][   T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.303535][   T60] usb 2-1: Product: syz
[   34.311684][   T60] usb 2-1: Manufacturer: syz
[   34.316289][   T60] usb 2-1: SerialNumber: syz
[   34.361740][   T26] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[   34.371065][   T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.379422][   T26] usb 1-1: Product: syz
[   34.383746][   T26] usb 1-1: Manufacturer: syz
[   34.388415][   T26] usb 1-1: SerialNumber: syz
[   34.394404][   T26] usb 1-1: config 0 descriptor??
[   34.411784][  T379] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   34.419170][  T379] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   34.461779][  T279] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[   34.471745][  T279] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[   34.573371][  T385] loop1: detected capacity change from 0 to 128
[   34.618924][  T385] UDC core: couldn't find an available UDC or it's busy: -16
[   34.626543][  T385] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   34.641802][  T279] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[   34.642662][  T379] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   34.651035][  T279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.658306][  T379] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   34.666558][  T279] usb 5-1: Product: syz
[   34.677377][  T279] usb 5-1: Manufacturer: syz
[   34.682472][  T279] usb 5-1: SerialNumber: syz
[   34.687881][  T279] usb 5-1: config 0 descriptor??
[   34.701472][  T423] fuse: Unknown parameter '0x000000000000000300000000000000000000003'
[   34.712101][   T60] usb 2-1: selecting invalid altsetting 1
[   34.722850][  T397] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   34.730053][  T397] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   34.737455][   T60] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[   34.752782][   T60] usb 2-1: USB disconnect, device number 2
[   34.964823][  T397] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   34.980128][  T397] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   35.081600][  T426] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #2: comm syz.2.39: corrupted xattr block 255
[   35.094299][  T426] EXT4-fs (loop2): Remounting filesystem read-only
[   35.100888][  T426] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[   35.109169][  T426] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,noblock_validity,max_batch_time=0x0000000000000000,errors=remount-ro,auto_da_alloc,grpjquota=.init_itable,barrier=0x0000000000000003,jqfmt=vfsv1,grpid,,. Quota mode: writeback.
[   35.133283][  T426] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #2: comm syz.2.39: corrupted xattr block 255
[   35.145188][  T426] EXT4-fs (loop2): Remounting filesystem read-only
[   35.151751][  T426] SELinux: (dev loop2, type ext4) getxattr errno 117
[   35.361774][   T26] Error reading MAC address
[   35.371743][  T425] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   35.570405][  T279] Error reading MAC address
[   35.658017][  T437] process 'syz.1.41' launched './file1' with NULL argv: empty string added
[   35.740469][  T433] capability: warning: `syz.1.41' uses deprecated v2 capabilities in a way that may be insecure
[   35.801724][  T425] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   35.820374][  T425] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   35.840493][  T425] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   35.858409][  T425] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   35.921516][  T443] EXT4-fs (loop0): Ignoring removed orlov option
[   35.928829][  T425] hub 4-1:4.0: USB hub found
[   35.940070][  T443] EXT4-fs (loop0): old and new quota format mixing
[   36.131908][  T425] hub 4-1:4.0: 2 ports detected
[   36.136929][  T425] usb 4-1: selecting invalid altsetting 1
[   36.142759][  T425] hub 4-1:4.0: Using single TT (err -22)
[   36.178985][  T452] SELinux: failed to load policy
[   36.266140][  T454] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000401,,errors=continue. Quota mode: writeback.
[   36.341841][  T425] hub 4-1:4.0: hub_hub_status failed (err = -71)
[   36.349398][  T425] hub 4-1:4.0: config failed, can't get hub status (err -71)
[   36.391975][  T425] usb 4-1: USB disconnect, device number 2
[   36.878447][  T465] set_capacity_and_notify: 4 callbacks suppressed
[   36.878463][  T465] loop3: detected capacity change from 0 to 128
[   37.059027][  T425] usb 1-1: USB disconnect, device number 2
[   37.110293][  T470] loop0: detected capacity change from 0 to 128
[   37.139266][  T465] FAULT_INJECTION: forcing a failure.
[   37.139266][  T465] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   37.160016][  T465] CPU: 0 PID: 465 Comm: syz.3.52 Not tainted syzkaller #0
[   37.167169][  T465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   37.177329][  T465] Call Trace:
[   37.180621][  T465]  <TASK>
[   37.183573][  T465]  __dump_stack+0x21/0x30
[   37.187921][  T465]  dump_stack_lvl+0x110/0x170
[   37.192611][  T465]  ? show_regs_print_info+0x20/0x20
[   37.197819][  T465]  ? slab_post_alloc_hook+0x4f/0x2b0
[   37.203114][  T465]  ? security_inode_alloc+0x33/0x110
[   37.208410][  T465]  ? inode_init_always+0x72c/0x9b0
[   37.213532][  T465]  ? new_inode_pseudo+0x91/0x210
[   37.218486][  T465]  ? proc_pid_make_inode+0x24/0x1c0
[   37.223701][  T465]  ? proc_pident_instantiate+0x69/0x2b0
[   37.229256][  T465]  ? proc_pident_lookup+0x1d5/0x280
[   37.234464][  T465]  ? proc_tid_base_lookup+0x2b/0x30
[   37.239671][  T465]  dump_stack+0x15/0x20
[   37.243836][  T465]  should_fail+0x3ab/0x500
[   37.248279][  T465]  should_fail_alloc_page+0x55/0x80
[   37.253488][  T465]  prepare_alloc_pages+0x13f/0x590
[   37.258616][  T465]  ? __alloc_pages_bulk+0xab0/0xab0
[   37.263826][  T465]  ? _raw_spin_lock_irqsave+0xc2/0x130
[   37.271422][  T465]  __alloc_pages+0x11d/0x460
[   37.276051][  T465]  ? zone_watermark_fast+0x250/0x250
[   37.281356][  T465]  ? xas_load+0x2dc/0x300
[   37.285714][  T465]  pagecache_get_page+0xacc/0xdd0
[   37.291080][  T465]  ? page_cache_prev_miss+0x290/0x290
[   37.296584][  T465]  ? __kernel_text_address+0xa0/0x100
[   37.301984][  T465]  ? unwind_get_return_address+0x4d/0x90
[   37.307639][  T465]  grab_cache_page_write_begin+0x59/0xb0
[   37.313288][  T465]  cont_write_begin+0x578/0x7b0
[   37.318156][  T465]  ? generic_cont_expand_simple+0x1a0/0x1a0
[   37.324061][  T465]  ? path_openat+0x284f/0x2f80
[   37.328842][  T465]  ? kasan_set_track+0x5b/0x70
[   37.333630][  T465]  fat_write_begin+0xa0/0x170
[   37.338321][  T465]  ? fat_block_truncate_page+0x50/0x50
[   37.343795][  T465]  generic_perform_write+0x2b7/0x690
[   37.349093][  T465]  ? grab_cache_page_write_begin+0xb0/0xb0
[   37.354912][  T465]  ? file_remove_privs+0x5c0/0x5c0
[   37.360048][  T465]  ? rwsem_write_trylock+0x136/0x300
[   37.365354][  T465]  ? clear_nonspinnable+0x60/0x60
[   37.370391][  T465]  __generic_file_write_iter+0x268/0x490
[   37.376036][  T465]  ? generic_write_checks+0x3df/0x480
[   37.381420][  T465]  generic_file_write_iter+0xa9/0x1d0
[   37.386809][  T465]  vfs_write+0x831/0xfd0
[   37.391063][  T465]  ? file_end_write+0x1b0/0x1b0
[   37.395924][  T465]  ? wait_for_completion_killable_timeout+0x10/0x10
[   37.402535][  T465]  ? __fget_files+0x2e1/0x340
[   37.407221][  T465]  ? __fdget_pos+0x2d2/0x380
[   37.411821][  T465]  ? ksys_write+0x70/0x260
[   37.416349][  T465]  ksys_write+0x14a/0x260
[   37.420700][  T465]  ? __ia32_sys_read+0x90/0x90
[   37.425591][  T465]  ? debug_smp_processor_id+0x17/0x20
[   37.431252][  T465]  __x64_sys_write+0x7b/0x90
[   37.435860][  T465]  x64_sys_call+0x8ef/0x9a0
[   37.440386][  T465]  do_syscall_64+0x4c/0xa0
[   37.444932][  T465]  ? clear_bhb_loop+0x50/0xa0
[   37.449728][  T465]  ? clear_bhb_loop+0x50/0xa0
[   37.454426][  T465]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   37.460334][  T465] RIP: 0033:0x7f97bee28f19
[   37.464761][  T465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   37.484467][  T465] RSP: 002b:00007f97bd877028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   37.492908][  T465] RAX: ffffffffffffffda RBX: 00007f97bf0a5fa0 RCX: 00007f97bee28f19
[   37.500895][  T465] RDX: 000000000208e24b RSI: 0000200000000040 RDI: 0000000000000005
[   37.508963][  T465] RBP: 00007f97bd877090 R08: 0000000000000000 R09: 0000000000000000
[   37.516965][  T465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   37.524979][  T465] R13: 00007f97bf0a6038 R14: 00007f97bf0a5fa0 R15: 00007fffdd3e92b8
[   37.533011][  T465]  </TASK>
[   37.566293][   T60] usb 5-1: USB disconnect, device number 2
[   37.652610][    T8] attempt to access beyond end of device
[   37.652610][    T8] loop0: rw=1, want=1041, limit=128
[   38.377699][  T482] FAULT_INJECTION: forcing a failure.
[   38.377699][  T482] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   38.563241][  T482] CPU: 1 PID: 482 Comm: syz.2.58 Not tainted syzkaller #0
[   38.570409][  T482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   38.580479][  T482] Call Trace:
[   38.583766][  T482]  <TASK>
[   38.586704][  T482]  __dump_stack+0x21/0x30
[   38.591049][  T482]  dump_stack_lvl+0x110/0x170
[   38.595829][  T482]  ? show_regs_print_info+0x20/0x20
[   38.601041][  T482]  dump_stack+0x15/0x20
[   38.605203][  T482]  should_fail+0x3ab/0x500
[   38.609628][  T482]  should_fail_alloc_page+0x55/0x80
[   38.614841][  T482]  prepare_alloc_pages+0x13f/0x590
[   38.619969][  T482]  ? __alloc_pages_bulk+0xab0/0xab0
[   38.625178][  T482]  ? _raw_spin_unlock+0x4d/0x70
[   38.630043][  T482]  __alloc_pages+0x11d/0x460
[   38.634646][  T482]  ? zone_watermark_fast+0x250/0x250
[   38.639946][  T482]  new_slab+0xa0/0x4d0
[   38.641626][    C0] sched: RT throttling activated
[   38.648954][  T482]  ? __cond_resched+0xd0/0xd0
[   38.653660][  T482]  ___slab_alloc+0x3ac/0x840
[   38.658466][  T482]  ? __khugepaged_enter+0x2f/0x2c0
[   38.663608][  T482]  ? __khugepaged_enter+0x2f/0x2c0
[   38.668747][  T482]  __slab_alloc+0x49/0x90
[   38.673114][  T482]  ? __khugepaged_enter+0x2f/0x2c0
[   38.678248][  T482]  kmem_cache_alloc+0x138/0x260
[   38.683127][  T482]  __khugepaged_enter+0x2f/0x2c0
[   38.688082][  T482]  do_huge_pmd_anonymous_page+0x568/0x1760
[   38.693911][  T482]  ? vma_thp_gfp_mask+0x160/0x160
[   38.698953][  T482]  ? switch_mm_irqs_off+0x724/0x960
[   38.704163][  T482]  ? __kasan_check_read+0x11/0x20
[   38.709293][  T482]  ? preempt_schedule_irq+0xca/0x120
[   38.714596][  T482]  ? cgroup_rstat_updated+0xf0/0x360
[   38.719894][  T482]  create_huge_pmd+0x99/0xb0
[   38.724495][  T482]  do_handle_mm_fault+0x1b63/0x1e30
[   38.729708][  T482]  ? kstrtouint_from_user+0x1c4/0x220
[   38.735092][  T482]  ? numa_migrate_prep+0xd0/0xd0
[   38.740044][  T482]  ? follow_page_mask+0x516/0xf30
[   38.745170][  T482]  __get_user_pages+0x80e/0x10c0
[   38.750131][  T482]  ? populate_vma_page_range+0xf0/0xf0
[   38.755701][  T482]  __mm_populate+0x324/0x470
[   38.760312][  T482]  ? mlock_fixup+0x345/0x4b0
[   38.764924][  T482]  ? check_vma_flags+0x2d0/0x2d0
[   38.769883][  T482]  do_mlock+0x4a6/0x580
[   38.774054][  T482]  ? __kasan_check_write+0x14/0x20
[   38.779187][  T482]  __x64_sys_mlock+0x60/0x70
[   38.783792][  T482]  x64_sys_call+0x27b/0x9a0
[   38.788310][  T482]  do_syscall_64+0x4c/0xa0
[   38.792745][  T482]  ? clear_bhb_loop+0x50/0xa0
[   38.797432][  T482]  ? clear_bhb_loop+0x50/0xa0
[   38.802215][  T482]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   38.808128][  T482] RIP: 0033:0x7f1016705f19
[   38.812592][  T482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   38.832241][  T482] RSP: 002b:00007f1015154028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[   38.840676][  T482] RAX: ffffffffffffffda RBX: 00007f1016982fa0 RCX: 00007f1016705f19
[   38.848663][  T482] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000
[   38.856647][  T482] RBP: 00007f1015154090 R08: 0000000000000000 R09: 0000000000000000
[   38.864721][  T482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   38.872708][  T482] R13: 00007f1016983038 R14: 00007f1016982fa0 R15: 00007fffe1ba0b18
[   38.880787][  T482]  </TASK>
[   38.949855][   T60] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   38.956567][  T489] loop3: detected capacity change from 0 to 128
[   38.964584][  T350] attempt to access beyond end of device
[   38.964584][  T350] loop0: rw=1, want=1041, limit=128
[   38.976291][   T30] kauditd_printk_skb: 30 callbacks suppressed
[   38.976304][   T30] audit: type=1400 audit(1794299688.494:196): avc:  denied  { read } for  pid=483 comm="syz.2.59" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   38.980862][  T486] loop1: detected capacity change from 0 to 8192
[   39.005328][   T30] audit: type=1400 audit(1794299688.494:197): avc:  denied  { open } for  pid=483 comm="syz.2.59" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   39.036285][   T30] audit: type=1400 audit(1794299688.504:198): avc:  denied  { ioctl } for  pid=483 comm="syz.2.59" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   39.061398][   T30] audit: type=1400 audit(1794299688.544:199): avc:  denied  { watch } for  pid=485 comm="syz.1.60" path="/12/file2/file0" dev="loop1" ino=1048644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[   39.087782][  T489] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   39.105831][  T489] FAT-fs (loop3): unable to read boot sector
[   39.287136][  T501] loop0: detected capacity change from 0 to 128
[   40.369890][  T502] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1)
[   40.377868][  T502] FAT-fs (loop1): Filesystem has been set read-only
[   40.401957][   T30] audit: type=1400 audit(1794299689.884:200): avc:  denied  { read } for  pid=487 comm="syz.3.61" dev="nsfs" ino=4026532476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   40.592884][   T30] audit: type=1400 audit(1794299689.884:201): avc:  denied  { open } for  pid=487 comm="syz.3.61" path="net:[4026532476]" dev="nsfs" ino=4026532476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   40.629725][   T30] audit: type=1400 audit(1794299689.884:202): avc:  denied  { connect } for  pid=487 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   40.680531][  T500] Zero length message leads to an empty skb
[   40.802352][   T30] audit: type=1400 audit(1794299690.244:203): avc:  denied  { read write } for  pid=493 comm="syz.0.62" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   40.875848][  T511] loop2: detected capacity change from 0 to 1024
[   40.942006][  T515] netlink: 24 bytes leftover after parsing attributes in process `syz.0.68'.
[   40.951041][   T30] audit: type=1400 audit(1794299690.244:204): avc:  denied  { open } for  pid=493 comm="syz.0.62" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   40.975116][  T513] loop4: detected capacity change from 0 to 2048
[   41.002658][  T515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.68'.
[   41.012651][  T511] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   41.023698][   T30] audit: type=1400 audit(1794299690.244:205): avc:  denied  { ioctl } for  pid=493 comm="syz.0.62" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   41.032170][  T511] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   41.048404][  T515] netlink: 24 bytes leftover after parsing attributes in process `syz.0.68'.
[   41.059289][  T513] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   41.066803][   T60] usb 5-1: unable to get BOS descriptor or descriptor too short
[   41.111778][  T513] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.141694][   T60] usb 5-1: unable to read config index 0 descriptor/start: -71
[   41.146773][  T511] JBD2: no valid journal superblock found
[   41.149308][   T60] usb 5-1: can't read configurations, error -71
[   41.166309][  T513] fs-verity: sha512 using implementation "sha512-avx2"
[   41.181703][  T511] EXT4-fs (loop2): error loading journal
[   41.196148][  T519] loop1: detected capacity change from 0 to 4096
[   41.220356][  T513] syz.4.67 (513) used greatest stack depth: 21000 bytes left
[   41.250151][  T519] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000401,,errors=continue. Quota mode: writeback.
[   41.349672][  T522] loop4: detected capacity change from 0 to 4096
[   41.361497][  T528] loop2: detected capacity change from 0 to 512
[   41.434029][  T528] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled
[   41.581251][  T522] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000401,,errors=continue. Quota mode: writeback.
[   41.741303][  T528] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,usrjquota=./file0,,errors=continue. Quota mode: writeback.
[   41.827142][  T528] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.650100][  T541] loop3: detected capacity change from 0 to 128
[   42.674462][  T542] loop2: detected capacity change from 0 to 256
[   42.744251][  T542] exfat: Deprecated parameter 'utf8'
[   42.749640][  T542] exfat: Deprecated parameter 'namecase'
[   42.755434][  T542] exfat: Deprecated parameter 'namecase'
[   42.761202][  T542] exfat: Deprecated parameter 'namecase'
[   42.776532][  T542] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[   42.793764][  T542] FAULT_INJECTION: forcing a failure.
[   42.793764][  T542] name failslab, interval 1, probability 0, space 0, times 0
[   42.806452][  T542] CPU: 1 PID: 542 Comm: syz.2.74 Not tainted syzkaller #0
[   42.813579][  T542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   42.823733][  T542] Call Trace:
[   42.827027][  T542]  <TASK>
[   42.829964][  T542]  __dump_stack+0x21/0x30
[   42.834310][  T542]  dump_stack_lvl+0x110/0x170
[   42.839002][  T542]  ? show_regs_print_info+0x20/0x20
[   42.844211][  T542]  ? __schedule+0xbd7/0x14a0
[   42.848815][  T542]  dump_stack+0x15/0x20
[   42.852988][  T542]  should_fail+0x3ab/0x500
[   42.857433][  T542]  __should_failslab+0xa4/0xe0
[   42.862207][  T542]  should_failslab+0x9/0x20
[   42.866715][  T542]  slab_pre_alloc_hook+0x39/0xd0
[   42.871661][  T542]  ? avc_alloc_node+0x83/0x4b0
[   42.876445][  T542]  kmem_cache_alloc+0x44/0x260
[   42.881217][  T542]  ? __switch_to+0x56c/0x1070
[   42.885905][  T542]  avc_alloc_node+0x83/0x4b0
[   42.890506][  T542]  ? irqentry_exit_cond_resched+0x29/0x30
[   42.896237][  T542]  ? irqentry_exit+0x37/0x40
[   42.900834][  T542]  ? sysvec_reschedule_ipi+0x78/0x80
[   42.906136][  T542]  ? asm_sysvec_reschedule_ipi+0x1b/0x20
[   42.911780][  T542]  ? avc_xperms_free+0x270/0x270
[   42.916728][  T542]  avc_update_node+0x30/0x8a0
[   42.921497][  T542]  ? __schedule+0xbd7/0x14a0
[   42.926101][  T542]  avc_denied+0x133/0x1b0
[   42.930444][  T542]  avc_has_perm_noaudit+0x46f/0x5c0
[   42.935653][  T542]  ? avc_denied+0x1b0/0x1b0
[   42.940169][  T542]  ? sysvec_reschedule_ipi+0x78/0x80
[   42.945468][  T542]  selinux_inode_permission+0x3b8/0x5f0
[   42.951028][  T542]  ? selinux_inode_follow_link+0x370/0x370
[   42.957026][  T542]  ? i_gid_into_mnt+0xa7/0x110
[   42.961796][  T542]  security_inode_permission+0xa0/0x100
[   42.967357][  T542]  inode_permission+0xef/0x4a0
[   42.972144][  T542]  vfs_mknod+0x165/0x4d0
[   42.976401][  T542]  unix_bind+0x4a5/0x8c0
[   42.980655][  T542]  ? unix_release+0xc0/0xc0
[   42.985177][  T542]  ? check_stack_object+0x10f/0x150
[   42.990426][  T542]  ? security_socket_bind+0x82/0xa0
[   42.995635][  T542]  __sys_bind+0x329/0x450
[   42.999972][  T542]  ? __ia32_sys_socketpair+0xb0/0xb0
[   43.005286][  T542]  ? __kasan_check_write+0x14/0x20
[   43.010408][  T542]  ? switch_fpu_return+0x15d/0x2c0
[   43.015529][  T542]  __x64_sys_bind+0x7a/0x90
[   43.020039][  T542]  x64_sys_call+0x6f0/0x9a0
[   43.024554][  T542]  do_syscall_64+0x4c/0xa0
[   43.029078][  T542]  ? clear_bhb_loop+0x50/0xa0
[   43.033770][  T542]  ? clear_bhb_loop+0x50/0xa0
[   43.038549][  T542]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   43.044452][  T542] RIP: 0033:0x7f1016705f19
[   43.048878][  T542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   43.068499][  T542] RSP: 002b:00007f1015133028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[   43.076930][  T542] RAX: ffffffffffffffda RBX: 00007f1016983090 RCX: 00007f1016705f19
[   43.084920][  T542] RDX: 000000000000006e RSI: 0000200000003b40 RDI: 0000000000000007
[   43.092903][  T542] RBP: 00007f1015133090 R08: 0000000000000000 R09: 0000000000000000
[   43.100891][  T542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   43.108872][  T542] R13: 00007f1016983128 R14: 00007f1016983090 R15: 00007fffe1ba0b18
[   43.116854][  T542]  </TASK>
[   43.188683][    T6] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   43.269759][  T548] loop3: detected capacity change from 0 to 256
[   43.329867][  T549] loop4: detected capacity change from 0 to 512
[   43.612312][  T549] EXT4-fs (loop4): Ignoring removed bh option
[   43.618792][  T549] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   43.835293][  T549] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,minixdf,bh,min_batch_time=0x0000000000000004,dioread_nolock,noquota,,errors=continue. Quota mode: writeback.
[   43.853478][  T549] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.982038][   T30] kauditd_printk_skb: 11 callbacks suppressed
[   43.982063][   T30] audit: type=1400 audit(1794299693.494:217): avc:  denied  { write } for  pid=543 comm="syz.4.75" path="/13/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   44.214584][   T30] audit: type=1400 audit(1794299693.694:218): avc:  denied  { read } for  pid=545 comm="syz.0.76" name="oneway_spam_detection" dev="binder" ino=1048617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   44.262560][   T30] audit: type=1400 audit(1794299693.694:219): avc:  denied  { open } for  pid=545 comm="syz.0.76" path="/dev/binderfs/features/oneway_spam_detection" dev="binder" ino=1048617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   44.315567][   T30] audit: type=1400 audit(1794299693.694:220): avc:  denied  { ioctl } for  pid=545 comm="syz.0.76" path="socket:[16946]" dev="sockfs" ino=16946 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   44.416482][  T566] xt_hashlimit: size too large, truncated to 1048576
[   44.489918][  T572] mmap: syz.1.83 (572) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[   44.961689][    T6] usb 2-1: device not accepting address 3, error -71
[   45.013053][   T30] audit: type=1400 audit(1794299694.534:221): avc:  denied  { write } for  pid=579 comm="syz.3.86" name="icmp6" dev="proc" ino=4026532685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   45.161800][  T535] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   45.164731][  T587] loop1: detected capacity change from 0 to 1024
[   45.255538][  T587] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869)
[   45.285493][  T587] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002]
[   45.349895][  T592] loop3: detected capacity change from 0 to 128
[   45.421798][   T30] audit: type=1400 audit(1794299694.854:222): avc:  denied  { mount } for  pid=589 comm="syz.4.90" name="/" dev="configfs" ino=13670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   45.445386][  T587] System zones: 0-1, 3-36
[   45.909836][  T587] EXT4-fs (loop1): orphan cleanup on readonly fs
[   45.927352][  T587] EXT4-fs (loop1): 1 orphan inode deleted
[   45.972193][  T587] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   46.002007][   T30] audit: type=1400 audit(1794299694.854:223): avc:  denied  { search } for  pid=589 comm="syz.4.90" name="/" dev="configfs" ino=13670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   46.024802][  T587] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:510: comm syz.1.89: Block bitmap for bg 0 marked uninitialized
[   46.061662][   T30] audit: type=1400 audit(1794299694.854:224): avc:  denied  { read } for  pid=589 comm="syz.4.90" name="/" dev="configfs" ino=13670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   46.065312][  T584] loop2: detected capacity change from 0 to 40427
[   46.117183][   T30] audit: type=1400 audit(1794299694.854:225): avc:  denied  { open } for  pid=589 comm="syz.4.90" path="/" dev="configfs" ino=13670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   46.141744][  T535] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[   46.148721][  T590] loop4: detected capacity change from 0 to 40427
[   46.151511][  T535] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[   46.192656][  T584] F2FS-fs (loop2): invalid crc value
[   46.192890][   T30] audit: type=1400 audit(1794299695.714:226): avc:  denied  { write } for  pid=589 comm="syz.4.90" name="/" dev="configfs" ino=13670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   46.252509][  T594] loop3: detected capacity change from 0 to 40427
[   46.260403][  T584] F2FS-fs (loop2): Found nat_bits in checkpoint
[   46.296575][  T584] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   46.311916][  T535] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[   46.321199][  T594] F2FS-fs (loop3): Invalid log_blocksize (64), supports only 12
[   46.321747][  T535] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.338284][  T594] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   46.346992][  T289] attempt to access beyond end of device
[   46.346992][  T289] loop2: rw=2049, want=45104, limit=40427
[   46.347317][  T594] F2FS-fs (loop3): Encrypt feature is off
[   46.366215][  T535] usb 1-1: Product: syz
[   46.370409][  T535] usb 1-1: Manufacturer: syz
[   46.375322][  T535] usb 1-1: SerialNumber: syz
[   46.382461][  T535] usb 1-1: config 0 descriptor??
[   46.411787][  T578] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   46.419387][  T578] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   46.447272][  T605] netlink: 40 bytes leftover after parsing attributes in process `syz.3.95'.
[   46.518576][  T590] loop4: detected capacity change from 0 to 512
[   46.519002][  T610] xt_hashlimit: size too large, truncated to 1048576
[   46.613457][  T613] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[   46.623916][  T613] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[   46.631604][  T613] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,quota,,errors=continue. Quota mode: writeback.
[   46.652411][  T613] syz.4.97 (pid 613) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   46.687448][  T578] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   46.730643][  T578] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   46.764098][  T619] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   46.771814][  T619] EXT4-fs (loop2): can't mount with both data=journal and delalloc
[   47.491259][  T622] FAULT_INJECTION: forcing a failure.
[   47.491259][  T622] name failslab, interval 1, probability 0, space 0, times 0
[   47.555905][  T622] CPU: 1 PID: 622 Comm: syz.1.99 Not tainted syzkaller #0
[   47.563065][  T622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   47.573304][  T622] Call Trace:
[   47.576596][  T622]  <TASK>
[   47.579535][  T622]  __dump_stack+0x21/0x30
[   47.583885][  T622]  dump_stack_lvl+0x110/0x170
[   47.588573][  T622]  ? show_regs_print_info+0x20/0x20
[   47.593790][  T622]  ? __schedule+0xbd7/0x14a0
[   47.598397][  T622]  dump_stack+0x15/0x20
[   47.602561][  T622]  should_fail+0x3ab/0x500
[   47.606993][  T622]  __should_failslab+0xa4/0xe0
[   47.611775][  T622]  should_failslab+0x9/0x20
[   47.616293][  T622]  slab_pre_alloc_hook+0x39/0xd0
[   47.621248][  T622]  ? __d_alloc+0x2d/0x690
[   47.625604][  T622]  kmem_cache_alloc+0x44/0x260
[   47.629545][  T624] device bridge1 entered promiscuous mode
[   47.630389][  T622]  __d_alloc+0x2d/0x690
[   47.640261][  T622]  ? irqentry_exit_cond_resched+0x29/0x30
[   47.646008][  T622]  d_alloc_pseudo+0x1d/0x70
[   47.650527][  T622]  alloc_file_pseudo+0xe0/0x200
[   47.655395][  T622]  ? alloc_empty_file_noaccount+0x80/0x80
[   47.661138][  T622]  ? kasan_check_range+0x11/0x2a0
[   47.666261][  T622]  ? __kasan_check_write+0x14/0x20
[   47.671394][  T622]  ? clear_nlink+0x8a/0xe0
[   47.675861][  T622]  __shmem_file_setup+0x1df/0x2b0
[   47.680990][  T622]  shmem_file_setup+0x2f/0x40
[   47.685680][  T622]  __se_sys_memfd_create+0x1de/0x3c0
[   47.690982][  T622]  __x64_sys_memfd_create+0x5b/0x70
[   47.696200][  T622]  x64_sys_call+0x473/0x9a0
[   47.700714][  T622]  do_syscall_64+0x4c/0xa0
[   47.705144][  T622]  ? clear_bhb_loop+0x50/0xa0
[   47.709832][  T622]  ? clear_bhb_loop+0x50/0xa0
[   47.714522][  T622]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   47.720429][  T622] RIP: 0033:0x7f6f21f08f19
[   47.724869][  T622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   47.744611][  T622] RSP: 002b:00007f6f20956e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   47.753044][  T622] RAX: ffffffffffffffda RBX: 00000000000004ed RCX: 00007f6f21f08f19
[   47.761050][  T622] RDX: 00007f6f20956ee0 RSI: 0000000000000000 RDI: 00007f6f21f98160
[   47.769037][  T622] RBP: 0000200000000400 R08: 00000000ffffffff R09: 0000000000000000
[   47.777041][  T622] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000080
[   47.785151][  T622] R13: 00007f6f20956ee0 R14: 00007f6f20956ea0 R15: 0000200000000180
[   47.793126][  T622]  </TASK>
[   47.821843][  T535] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[   47.877036][  T633] fuse: Unknown parameter '0x000000000000000300000000000000000000003'
[   48.200170][  T634] set_capacity_and_notify: 2 callbacks suppressed
[   48.200196][  T634] loop1: detected capacity change from 0 to 128
[   49.231852][  T535] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[   49.260913][  T628] loop3: detected capacity change from 0 to 40427
[   49.274835][  T535] usb 1-1: USB disconnect, device number 3
[   49.305153][  T649] device syzkaller0 entered promiscuous mode
[   49.323773][  T628] F2FS-fs (loop3): invalid crc value
[   49.450278][   T30] kauditd_printk_skb: 3 callbacks suppressed
[   49.450293][   T30] audit: type=1400 audit(1794299698.884:230): avc:  denied  { read } for  pid=648 comm="syz.4.107" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   49.512548][  T628] F2FS-fs (loop3): Found nat_bits in checkpoint
[   49.605744][  T659] xt_hashlimit: size too large, truncated to 1048576
[   49.665489][   T30] audit: type=1400 audit(1794299698.884:231): avc:  denied  { open } for  pid=648 comm="syz.4.107" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   49.711800][  T628] F2FS-fs (loop3): Start checkpoint disabled!
[   49.739766][  T628] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   49.891715][   T60] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   49.971882][  T642] loop0: detected capacity change from 0 to 40427
[   49.994136][  T642] F2FS-fs (loop0): Mismatch start address, segment0(512) cp_blkaddr(0)
[   50.013544][  T642] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   50.035087][  T642] F2FS-fs (loop0): invalid crc value
[   50.053142][  T642] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   50.071679][   T30] audit: type=1400 audit(1794299699.584:232): avc:  denied  { mounton } for  pid=666 comm="syz.3.112" path="/26/file0" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   50.120431][   T30] audit: type=1400 audit(1794299699.634:233): avc:  denied  { ioctl } for  pid=666 comm="syz.3.112" path="socket:[17692]" dev="sockfs" ino=17692 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   50.141648][   T60] usb 3-1: Using ep0 maxpacket: 16
[   50.145172][  T642] F2FS-fs (loop0): Start checkpoint disabled!
[   50.156644][   T30] audit: type=1400 audit(1794299699.654:234): avc:  denied  { write } for  pid=666 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   50.176366][  T642] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   50.183478][  T642] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   50.246106][  T642] attempt to access beyond end of device
[   50.246106][  T642] loop0: rw=2049, want=45104, limit=40427
[   50.261824][   T60] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   50.281599][   T60] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   50.305594][   T60] usb 3-1: config 0 interface 0 has no altsetting 0
[   50.324304][   T60] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[   50.347709][   T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.356106][  T672] input: syz1 as /devices/virtual/input/input5
[   50.372730][   T30] audit: type=1400 audit(1794299699.894:235): avc:  denied  { read } for  pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=645 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   50.375822][   T60] usb 3-1: config 0 descriptor??
[   50.413358][   T30] audit: type=1400 audit(1794299699.894:236): avc:  denied  { open } for  pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=645 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   50.440210][   T30] audit: type=1400 audit(1794299699.894:237): avc:  denied  { ioctl } for  pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=645 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   50.480978][  T314] attempt to access beyond end of device
[   50.480978][  T314] loop0: rw=2049, want=40984, limit=40427
[   50.611970][  T676] loop1: detected capacity change from 0 to 512
[   50.644141][  T676] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[   50.651720][  T676] EXT4-fs (loop1): can't mount with both data=journal and delalloc
[   51.109245][   T30] audit: type=1400 audit(1794299700.624:238): avc:  denied  { watch watch_reads } for  pid=680 comm="syz.3.116" path="/" dev="configfs" ino=13670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   51.476792][   T30] audit: type=1400 audit(1794299700.844:239): avc:  denied  { checkpoint_restore } for  pid=655 comm="syz.2.109" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   51.577642][  T687] netlink: 'syz.0.117': attribute type 14 has an invalid length.
[   51.831122][   T60] itetech 0003:258A:6A88.0001: unknown main item tag 0x0
[   51.833775][  T656] loop2: detected capacity change from 0 to 128
[   51.871417][   T60] itetech 0003:258A:6A88.0001: unknown main item tag 0x0
[   51.881743][   T60] itetech 0003:258A:6A88.0001: unknown main item tag 0x0
[   51.888877][   T60] itetech 0003:258A:6A88.0001: unknown main item tag 0x0
[   51.896026][   T60] itetech 0003:258A:6A88.0001: unknown main item tag 0x0
[   51.906751][  T656] FAT-fs (loop2): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1)
[   51.916669][   T60] itetech 0003:258A:6A88.0001: hiddev96,hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.2-1/input0
[   51.965519][  T697] loop3: detected capacity change from 0 to 512
[   52.038074][  T704] xt_hashlimit: size too large, truncated to 1048576
[   52.100904][  T697] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback.
[   52.127798][  T503] usb 3-1: USB disconnect, device number 2
[   52.175103][  T697] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.316336][  T713] loop4: detected capacity change from 0 to 2048
[   52.542066][  T713] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   52.584551][  T713] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   52.668783][  T713] overlayfs: failed to verify upper (/file0, ino=12, err=-28)
[   52.676392][  T713] overlayfs: failed to verify index dir 'upper' xattr
[   52.683247][  T713] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[   52.725917][  T724] overlayfs: unrecognized mount option "/" or missing value
[   52.763804][  T724] loop2: detected capacity change from 0 to 512
[   52.860881][  T726] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   52.916991][  T726] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   52.933168][  T736] loop2: detected capacity change from 0 to 256
[   52.982671][  T736] exfat: Deprecated parameter 'utf8'
[   52.988062][  T736] exfat: Deprecated parameter 'namecase'
[   53.055082][  T736] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   53.091263][  T743] xt_hashlimit: size too large, truncated to 1048576
[   53.106621][  T741] loop1: detected capacity change from 0 to 2048
[   53.194189][  T731] F2FS-fs (loop0): invalid crc value
[   53.200465][  T731] F2FS-fs (loop0): Found nat_bits in checkpoint
[   53.234502][  T741] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   53.250116][  T752] FAULT_INJECTION: forcing a failure.
[   53.250116][  T752] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   53.253993][  T741] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   53.315026][  T741] overlayfs: failed to verify upper (/file0, ino=12, err=-28)
[   53.321765][  T752] CPU: 0 PID: 752 Comm: syz.4.138 Not tainted syzkaller #0
[   53.322587][  T741] overlayfs: failed to verify index dir 'upper' xattr
[   53.329811][  T752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   53.336623][  T741] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[   53.346724][  T752] Call Trace:
[   53.346735][  T752]  <TASK>
[   53.346741][  T752]  __dump_stack+0x21/0x30
[   53.346767][  T752]  dump_stack_lvl+0x110/0x170
[   53.362898][  T731] F2FS-fs (loop0): Start checkpoint disabled!
[   53.363487][  T752]  ? show_regs_print_info+0x20/0x20
[   53.383940][  T752]  dump_stack+0x15/0x20
[   53.388120][  T752]  should_fail+0x3ab/0x500
[   53.392547][  T752]  should_fail_usercopy+0x1a/0x20
[   53.397599][  T752]  _copy_from_iter+0x220/0x10a0
[   53.402489][  T752]  ? copy_mc_pipe_to_iter+0x7e0/0x7e0
[   53.407885][  T752]  ? __kmalloc_track_caller+0x13c/0x2c0
[   53.413468][  T752]  ? __check_object_size+0x2dd/0x3b0
[   53.418783][  T752]  netlink_sendmsg+0x72c/0xb80
[   53.423789][  T752]  ? netlink_getsockopt+0x530/0x530
[   53.429014][  T752]  ? kasan_set_track+0x4a/0x70
[   53.433794][  T752]  ? security_socket_sendmsg+0x82/0xa0
[   53.439270][  T752]  ? netlink_getsockopt+0x530/0x530
[   53.444580][  T752]  ____sys_sendmsg+0x5be/0x8f0
[   53.449357][  T752]  ? __sys_sendmsg_sock+0x40/0x40
[   53.454393][  T752]  ? import_iovec+0x7c/0xb0
[   53.458917][  T752]  ___sys_sendmsg+0x236/0x2e0
[   53.463611][  T752]  ? __sys_sendmsg+0x280/0x280
[   53.468397][  T752]  ? __fdget+0x1a1/0x230
[   53.472646][  T752]  __x64_sys_sendmsg+0x201/0x2d0
[   53.477595][  T752]  ? ___sys_sendmsg+0x2e0/0x2e0
[   53.482440][  T752]  ? ksys_write+0x1fa/0x260
[   53.486939][  T752]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   53.493002][  T752]  x64_sys_call+0x4b/0x9a0
[   53.497414][  T752]  do_syscall_64+0x4c/0xa0
[   53.501830][  T752]  ? clear_bhb_loop+0x50/0xa0
[   53.506501][  T752]  ? clear_bhb_loop+0x50/0xa0
[   53.511174][  T752]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   53.517076][  T752] RIP: 0033:0x7ff51d6bbf19
[   53.521491][  T752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   53.541269][  T752] RSP: 002b:00007ff51c10a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   53.549684][  T752] RAX: ffffffffffffffda RBX: 00007ff51d938fa0 RCX: 00007ff51d6bbf19
[   53.557654][  T752] RDX: 0000000020004000 RSI: 0000200000000080 RDI: 0000000000000003
[   53.565619][  T752] RBP: 00007ff51c10a090 R08: 0000000000000000 R09: 0000000000000000
[   53.573588][  T752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   53.581567][  T752] R13: 00007ff51d939038 R14: 00007ff51d938fa0 R15: 00007ffe0f89f448
[   53.589536][  T752]  </TASK>
[   53.601693][  T731] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   53.647941][  T761] set_capacity_and_notify: 1 callbacks suppressed
[   53.647957][  T761] loop4: detected capacity change from 0 to 512
[   53.688201][  T764] FAULT_INJECTION: forcing a failure.
[   53.688201][  T764] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   53.702394][  T764] CPU: 0 PID: 764 Comm: syz.3.142 Not tainted syzkaller #0
[   53.709623][  T764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   53.719766][  T764] Call Trace:
[   53.723056][  T764]  <TASK>
[   53.725982][  T764]  __dump_stack+0x21/0x30
[   53.730310][  T764]  dump_stack_lvl+0x110/0x170
[   53.734994][  T764]  ? show_regs_print_info+0x20/0x20
[   53.740454][  T764]  dump_stack+0x15/0x20
[   53.744611][  T764]  should_fail+0x3ab/0x500
[   53.749209][  T764]  should_fail_usercopy+0x1a/0x20
[   53.754231][  T764]  _copy_to_user+0x20/0x90
[   53.758651][  T764]  simple_read_from_buffer+0xe9/0x160
[   53.764107][  T764]  proc_fail_nth_read+0x1a6/0x220
[   53.769128][  T764]  ? proc_fault_inject_write+0x310/0x310
[   53.774768][  T764]  ? security_file_permission+0x83/0xa0
[   53.780407][  T764]  ? proc_fault_inject_write+0x310/0x310
[   53.786040][  T764]  vfs_read+0x28c/0xc20
[   53.790193][  T764]  ? kasan_quarantine_put+0x34/0x190
[   53.795493][  T764]  ? kernel_read+0x1f0/0x1f0
[   53.800078][  T764]  ? __kasan_check_write+0x14/0x20
[   53.805190][  T764]  ? mutex_lock+0x9b/0x1c0
[   53.809613][  T764]  ? wait_for_completion_killable_timeout+0x10/0x10
[   53.816200][  T764]  ? __fget_files+0x2e1/0x340
[   53.820875][  T764]  ? __fdget_pos+0x2d2/0x380
[   53.825548][  T764]  ? ksys_read+0x70/0x260
[   53.829874][  T764]  ksys_read+0x14a/0x260
[   53.834111][  T764]  ? vfs_write+0xfd0/0xfd0
[   53.838524][  T764]  ? debug_smp_processor_id+0x17/0x20
[   53.843891][  T764]  __x64_sys_read+0x7b/0x90
[   53.848390][  T764]  x64_sys_call+0x96d/0x9a0
[   53.852956][  T764]  do_syscall_64+0x4c/0xa0
[   53.857805][  T764]  ? clear_bhb_loop+0x50/0xa0
[   53.862477][  T764]  ? clear_bhb_loop+0x50/0xa0
[   53.867150][  T764]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   53.873038][  T764] RIP: 0033:0x7f97bede974e
[   53.877451][  T764] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   53.897051][  T764] RSP: 002b:00007f97bd876fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   53.905645][  T764] RAX: ffffffffffffffda RBX: 00007f97bd8776c0 RCX: 00007f97bede974e
[   53.913616][  T764] RDX: 000000000000000f RSI: 00007f97bd8770a0 RDI: 0000000000000003
[   53.921609][  T764] RBP: 00007f97bd877090 R08: 0000000000000000 R09: 0000000000000000
[   53.929584][  T764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   53.937592][  T764] R13: 00007f97bf0a6038 R14: 00007f97bf0a5fa0 R15: 00007fffdd3e92b8
[   53.945566][  T764]  </TASK>
[   53.987916][  T761] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   54.015593][  T770] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   54.021917][  T761] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 1024
[   54.253727][  T776] fuse: Bad value for 'fd'
[   54.467362][  T786] loop1: detected capacity change from 0 to 2048
[   54.547985][  T786] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,block_validity,grpid,,errors=continue. Quota mode: writeback.
[   54.575821][  T786] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.586511][   T39] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   54.728239][   T30] kauditd_printk_skb: 19 callbacks suppressed
[   54.728254][   T30] audit: type=1400 audit(1794299704.244:259): avc:  denied  { add_name } for  pid=781 comm="syz.1.147" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   54.732069][  T784] Mass Storage Function, version: 2009/09/11
[   54.742531][   T30] audit: type=1400 audit(1794299704.244:260): avc:  denied  { create } for  pid=781 comm="syz.1.147" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[   54.782384][    T8] attempt to access beyond end of device
[   54.782384][    T8] loop0: rw=2049, want=40984, limit=40427
[   54.800124][  T791] loop4: detected capacity change from 0 to 128
[   54.808371][  T784] LUN: removable file: (no medium)
[   55.000261][   T39] usb 3-1: device descriptor read/64, error -71
[   55.415797][   T30] audit: type=1400 audit(1794299704.914:261): avc:  denied  { remove_name } for  pid=286 comm="syz-executor" name="file3" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   55.440270][   T30] audit: type=1400 audit(1794299704.914:262): avc:  denied  { unlink } for  pid=286 comm="syz-executor" name="file3" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   55.462788][   T30] audit: type=1400 audit(1794299704.954:263): avc:  denied  { rmdir } for  pid=286 comm="syz-executor" name="config" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   55.507759][   T30] audit: type=1400 audit(1794299704.954:264): avc:  denied  { unlink } for  pid=286 comm="syz-executor" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   55.518425][  T793] xt_hashlimit: size too large, truncated to 1048576
[   55.531119][   T30] audit: type=1400 audit(1794299704.954:265): avc:  denied  { rmdir } for  pid=286 comm="syz-executor" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   55.669236][   T30] audit: type=1400 audit(1794299705.184:266): avc:  denied  { create } for  pid=799 comm="syz.1.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   55.691815][   T39] usb 3-1: device descriptor read/64, error -71
[   55.764572][  T804] loop3: detected capacity change from 0 to 1024
[   55.969453][  T804] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[   56.003362][   T39] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   56.143616][   T30] audit: type=1400 audit(1794299705.304:267): avc:  denied  { bind } for  pid=799 comm="syz.1.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   56.301800][   T39] usb 3-1: device descriptor read/64, error -71
[   56.444572][   T30] audit: type=1400 audit(1794299705.304:268): avc:  denied  { write } for  pid=799 comm="syz.1.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   56.602931][  T814] loop1: detected capacity change from 0 to 512
[   56.711669][   T39] usb 3-1: device descriptor read/64, error -71
[   56.729312][  T819] loop3: detected capacity change from 0 to 1024
[   56.818365][  T819] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   56.831858][   T39] usb usb3-port1: attempt power cycle
[   56.878303][  T830] loop4: detected capacity change from 0 to 256
[   56.893742][  T830] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[   56.984896][  T835] fuse: Unknown parameter ''
[   57.016389][  T835] loop3: detected capacity change from 0 to 4096
[   57.090378][  T838] loop0: detected capacity change from 0 to 128
[   57.261935][   T39] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   59.564419][   T39] usb 3-1: device not accepting address 5, error -71
[   59.588181][  T841] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   59.590652][  T847] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   59.596446][  T841] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   59.604570][  T847] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   59.615382][  T860] loop1: detected capacity change from 0 to 512
[   59.775165][  T862] xt_hashlimit: size too large, truncated to 1048576
[   59.892622][  T870] fuse: Unknown parameter ''
[   59.984503][  T870] loop0: detected capacity change from 0 to 4096
[   61.002369][  T880] loop2: detected capacity change from 0 to 1024
[   61.079860][  T880] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[   61.100338][  T882] loop4: detected capacity change from 0 to 512
[   61.104429][  T885] loop0: detected capacity change from 0 to 256
[   61.128900][  T880] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[   61.150743][  T880] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,quota,,errors=continue. Quota mode: writeback.
[   61.199732][  T888] loop3: detected capacity change from 0 to 256
[   61.231973][  T882] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[   61.239422][  T882] EXT4-fs (loop4): can't mount with both data=journal and delalloc
[   61.254659][  T888] exfat: Deprecated parameter 'utf8'
[   61.262055][  T888] exfat: Deprecated parameter 'utf8'
[   61.291836][  T888] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   61.335887][  T892] loop2: detected capacity change from 0 to 4096
[   61.476114][  T892] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000401,,errors=continue. Quota mode: writeback.
[   61.694283][  T904] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   61.721722][  T904] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   61.839061][  T915] loop2: detected capacity change from 0 to 512
[   61.865097][  T915] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   61.872581][  T915] EXT4-fs (loop2): can't mount with both data=journal and delalloc
[   61.930300][  T918] fuse: Unknown parameter ''
[   62.015051][  T921] fuse: Unknown parameter ''
[   62.146336][  T918] loop1: detected capacity change from 0 to 4096
[   62.153401][  T921] loop0: detected capacity change from 0 to 4096
[   63.597228][  T923] xt_hashlimit: size too large, truncated to 1048576
[   64.390399][  T929] EXT4-fs error (device loop1): ext4_xattr_inode_iget:397: comm syz.1.188: Parent and EA inode have the same ino 15
[   64.406213][   T30] kauditd_printk_skb: 10 callbacks suppressed
[   64.406229][   T30] audit: type=1400 audit(1794299713.924:279): avc:  denied  { write } for  pid=933 comm="syz.0.189" name="event2" dev="devtmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   64.526370][  T929] EXT4-fs (loop1): 1 orphan inode deleted
[   64.541883][  T929] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   64.613469][  T286] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   65.121892][   T30] audit: type=1400 audit(1794299714.614:280): avc:  denied  { unlink } for  pid=286 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1
[   65.145380][  T286] ------------[ cut here ]------------
[   65.150941][  T286] kernel BUG at fs/namei.c:2941!
[   65.154285][  T938] set_capacity_and_notify: 1 callbacks suppressed
[   65.154298][  T938] loop2: detected capacity change from 0 to 256
[   65.180444][  T286] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[   65.186551][  T286] CPU: 1 PID: 286 Comm: syz-executor Not tainted syzkaller #0
[   65.194025][  T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   65.204097][  T286] RIP: 0010:may_delete+0x727/0x730
[   65.209232][  T286] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 82 fe ff ff 48 89 df e8 da 25 f5 ff e9 75 fe ff ff e8 70 8b b5 ff 0f 0b e8 69 8b b5 ff <0f> 0b 0f 1f 80 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 51 8b
[   65.228853][  T286] RSP: 0018:ffffc90000a37cc8 EFLAGS: 00010293
[   65.235210][  T286] RAX: ffffffff81b44b97 RBX: ffff888129852bb0 RCX: ffff888107db3c00
[   65.243207][  T286] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000
[   65.251208][  T286] RBP: ffffc90000a37d20 R08: 0000000000000003 R09: 0000000000000004
[   65.259244][  T286] R10: dffffc0000000000 R11: fffff52000146f78 R12: 1ffff1102530a576
[   65.267244][  T286] R13: 0000000000000001 R14: ffff88812984fcf0 R15: dffffc0000000000
[   65.275248][  T286] FS:  00005555907ed500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   65.284212][  T286] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   65.290818][  T286] CR2: 0000200000abb030 CR3: 00000001255a6000 CR4: 00000000003506a0
[   65.298818][  T286] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   65.306818][  T286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   65.314809][  T286] Call Trace:
[   65.318105][  T286]  <TASK>
[   65.321228][  T286]  vfs_rmdir+0x2f/0x450
[   65.325407][  T286]  ? incfs_kill_sb+0xec/0x210
[   65.330129][  T286]  incfs_kill_sb+0xfe/0x210
[   65.334649][  T286]  deactivate_locked_super+0xa0/0x100
[   65.340049][  T286]  deactivate_super+0xaf/0xe0
[   65.344750][  T286]  cleanup_mnt+0x44f/0x500
[   65.349192][  T286]  __cleanup_mnt+0x19/0x20
[   65.353631][  T286]  task_work_run+0x127/0x190
[   65.358419][  T286]  exit_to_user_mode_loop+0xd0/0xe0
[   65.363641][  T286]  exit_to_user_mode_prepare+0x87/0xd0
[   65.369111][  T286]  syscall_exit_to_user_mode+0x1a/0x30
[   65.374592][  T286]  do_syscall_64+0x58/0xa0
[   65.379025][  T286]  ? clear_bhb_loop+0x50/0xa0
[   65.383719][  T286]  ? clear_bhb_loop+0x50/0xa0
[   65.388426][  T286]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   65.394436][  T286] RIP: 0033:0x7f6f21f0a157
[   65.398866][  T286] Code: a2 c7 05 9c 25 25 00 00 00 00 00 eb 96 e8 c1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   65.418573][  T286] RSP: 002b:00007ffd8c572218 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   65.427009][  T286] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6f21f0a157
[   65.435082][  T286] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8c5722d0
[   65.443072][  T286] RBP: 00007ffd8c5722d0 R08: 00007ffd8c5732d0 R09: 00000000ffffffff
[   65.451153][  T286] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8c5733c0
[   65.459153][  T286] R13: 00007f6f21f97363 R14: 000000000000fc4c R15: 00007ffd8c574490
[   65.467152][  T286]  </TASK>
[   65.470191][  T286] Modules linked in:
[   65.500119][  T286] ---[ end trace f159d14bca94c28d ]---
[   65.531994][  T940] loop3: detected capacity change from 0 to 4096
[   65.542581][  T286] RIP: 0010:may_delete+0x727/0x730
[   65.547801][  T286] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 82 fe ff ff 48 89 df e8 da 25 f5 ff e9 75 fe ff ff e8 70 8b b5 ff 0f 0b e8 69 8b b5 ff <0f> 0b 0f 1f 80 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 51 8b
[   65.590436][  T942] device veth1_macvtap left promiscuous mode
[   65.617358][  T286] RSP: 0018:ffffc90000a37cc8 EFLAGS: 00010293
[   65.636004][  T286] RAX: ffffffff81b44b97 RBX: ffff888129852bb0 RCX: ffff888107db3c00
[   65.661317][  T940] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000401,,errors=continue. Quota mode: writeback.
[   65.682082][  T286] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000
[   65.696963][  T286] RBP: ffffc90000a37d20 R08: 0000000000000003 R09: 0000000000000004
[   65.714690][  T286] R10: dffffc0000000000 R11: fffff52000146f78 R12: 1ffff1102530a576
[   65.723133][  T286] R13: 0000000000000001 R14: ffff88812984fcf0 R15: dffffc0000000000
[   65.731178][  T286] FS:  00005555907ed500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   65.750661][  T286] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   65.757354][  T286] CR2: 00007fffdd3e7ed0 CR3: 00000001255a6000 CR4: 00000000003506b0
[   65.765527][  T286] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   65.773575][  T286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   65.782202][  T286] Kernel panic - not syncing: Fatal exception
[   65.788344][  T286] Kernel Offset: disabled
[   65.792680][  T286] Rebooting in 86400 seconds..