last executing test programs:
661.852094ms ago: executing program 3 (id=4):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x0, 0x1, 0x1}})
501.143508ms ago: executing program 3 (id=6):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x10, 0x4, 0x8, 0x2}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a80)={r0, &(0x7f0000000ac0), 0x0}, 0x20)
490.663518ms ago: executing program 3 (id=7):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'dummy0\x00', &(0x7f0000000140)=@ethtool_rxfh_indir={0x13}})
448.460289ms ago: executing program 1 (id=2):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000010"], 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0xd2513000)
389.6635ms ago: executing program 3 (id=8):
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000740)='27', 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mount$tmpfs(0x0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80), 0x1, &(0x7f0000000ac0)=ANY=[@ANYRES16])
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000b80)={'veth1_macvtap\x00', &(0x7f0000000bc0)=@ethtool_sset_info={0x37, 0x8, 0xe}})
389.46044ms ago: executing program 1 (id=9):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
388.72264ms ago: executing program 1 (id=10):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000001a00)=0x5, 0x4)
connect$inet(r0, &(0x7f0000001a40)={0x2, 0x4e21, @local}, 0x10)
376.665511ms ago: executing program 1 (id=11):
r0 = creat(&(0x7f0000000a80)='./file0\x00', 0x102)
r1 = open$dir(&(0x7f0000000ac0)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x2, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c80)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)=[0x5], 0x0, 0x0, 0x2000000000000080, 0x1, r3}}, 0x40)
350.792511ms ago: executing program 1 (id=12):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000400)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x2a}, {@loopback, 0x15, 0x0, 0x1, 0xfffffffc}}, 0x44)
282.740713ms ago: executing program 1 (id=13):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1800011, &(0x7f0000000200)={[{@nombcache}, {@sysvgroups}, {@norecovery}, {@abort}, {@nombcache}]}, 0x28, 0x5fb, &(0x7f0000000240)="$eJzs3c9vFFUcAPDvTH/Sqi3EqHiQJsZAorS0gCHGRLgTgj9uniotBFkooTVaJLEkeDExXjyYePIg/hdK4tWDVw9ePBkSYgwHMUTWzO5s2W53+3u7y+7nkwz73sx23pvSb9+b1/dmA+haY9k/acT+iLiaRIxUHeuN/OBY+X33/75xLtuSKBbf/SuJG58lS9XnSvLX4fyL/xuJ5Nc0Yl/P6nLnF69fmi4UZq/l+YmFy1cn5hevH754efrC7IXZK1OvT504fuz4ickj27q+6qJP3/rw45Evzrz//bcPk8kffj+TxMl4lL8hu67arx3YVsnZ92wsimUPqvdn39cT2zx3u/hnpPJz8lhSu4O2dT7/eXwmIp6Pkeip+t8cic/fbmnlgKYqJlFpo4Cuk2wp/gd3viLALqv0Ayr39vXug1dLm9wrAXbDvVPlAYBy7PdFRCX+e8tjgzEY2d6h+8mKcZ4kIrY3MleWlfHLz2duZVs0GIcDmmPpZmWUu7b9T0qxORqDpdzQ/XRF/KdVW7b/nS2WP1aTF/+we5ZuRsQLefvfH5uK/7Gq+P9gi+WLfwAAAAAAANg5d05FxGv15v+ly/N/+uvM/xmOiJM7UP76f/9L7+aJZAeKA6rcOxXxZt35v8tzfEd78tzTpfkAfcn5i4XZI/mawUPRN5Dla5f4plWvh7/c902j8qvn/2VbVn5lLmB+hru9NQtxZ6YXpnfi2qHb3bsZ8WJp/u+BfM/K+T9Z+5/Uaf+zuL66wTL2vXL7bKNj68c/0CzF7yIO1m3/H3e3k7WfzzFR6g9MVHoFq7306Vc/Nipf/EPrZO3/0NrxP5BUP69nfnPn74+Io4u9xUbHt9r/70/e66mcP/PJ9MLCtcmI/uT06v1Tm6szdKpKPFTiJYv/Qy+vPf633P+visM9EbG0wTKfezT8R6Nj2n9onSz+Z9Zu/0dXtv+bT0zdHv2pUflnN9T+Hyu16YfyPcb/oNrq53FsNEBbUl0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeMKlEfFUJOn4cjpNx8cjhiPi2RhKC3PzC6+en/voykx2rPT5/2nlk35Hyvkky0+W0o/zUzX5oxGxNyK+7tlTyo+fmyvMtPriAQAAAAAAAAAAAAAAAAAAoE0Ml9b8Fwdq1/9n/uxpde2ApuvNX8U7dJ/edd/xsFhWu7840Kw6Abtj/fgHOtXG47+vqfUAdl/j+H/wsH6/H+gU+v/QvbYY//5cAB1A+w/daoNjeoPNrgfQCtp/AAAAAADoKHsP3PktiYilN/aUtkx/fsxkf+hsaasrALSMObzQvXrnWl0DoFXc4wPJcurfuov9G8/+T5pTIQAAAAAAAAAAAABglYP7rf+HbrX2+n9z+6GTrbH+v17we1wAdJDGH/2h7YdO5x4fWK+1t/4fAAAAAAAAAAAAANrA4PVL04XC7LX5xScv8VZ7VGNziaXptqjGjiYeNefMfRHRHhe424nKIzhaWI0W/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACW/R8AAP//nqEvTw==")
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000001480)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
0s ago: executing program 3 (id=14):
syz_pidfd_open(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21)
kernel console output (not intermixed with test programs):
syzkaller
syzkaller login: [ 8.340688][ T113] udevd (113) used greatest stack depth: 22888 bytes left
[ 13.909171][ T30] kauditd_printk_skb: 48 callbacks suppressed
[ 13.909184][ T30] audit: type=1400 audit(1792725431.128:59): avc: denied { transition } for pid=223 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 13.915309][ T30] audit: type=1400 audit(1792725431.128:60): avc: denied { noatsecure } for pid=223 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 13.919656][ T30] audit: type=1400 audit(1792725431.128:61): avc: denied { write } for pid=223 comm="sh" path="pipe:[366]" dev="pipefs" ino=366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 13.923113][ T30] audit: type=1400 audit(1792725431.128:62): avc: denied { rlimitinh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 13.931641][ T30] audit: type=1400 audit(1792725431.128:63): avc: denied { siginh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts.
[ 20.651172][ T30] audit: type=1400 audit(1792725437.868:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 20.652681][ T277] cgroup: Unknown subsys name 'net'
[ 20.678611][ T30] audit: type=1400 audit(1792725437.868:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 20.711508][ T30] audit: type=1400 audit(1792725437.898:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 20.711694][ T277] cgroup: Unknown subsys name 'devices'
[ 20.859035][ T277] cgroup: Unknown subsys name 'hugetlb'
[ 20.865861][ T277] cgroup: Unknown subsys name 'rlimit'
[ 20.971867][ T30] audit: type=1400 audit(1792725438.188:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 20.986350][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[ 20.996310][ T30] audit: type=1400 audit(1792725438.188:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 21.041061][ T30] audit: type=1400 audit(1792725438.188:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 21.062845][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 21.075086][ T30] audit: type=1400 audit(1792725438.228:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 21.117491][ T30] audit: type=1400 audit(1792725438.228:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 21.154368][ T30] audit: type=1400 audit(1792725438.278:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 21.185750][ T30] audit: type=1400 audit(1792725438.278:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 21.811024][ T289] bridge0: port 1(bridge_slave_0) entered blocking state
[ 21.819695][ T289] bridge0: port 1(bridge_slave_0) entered disabled state
[ 21.830613][ T289] device bridge_slave_0 entered promiscuous mode
[ 21.838431][ T285] bridge0: port 1(bridge_slave_0) entered blocking state
[ 21.847556][ T285] bridge0: port 1(bridge_slave_0) entered disabled state
[ 21.858262][ T285] device bridge_slave_0 entered promiscuous mode
[ 21.868059][ T285] bridge0: port 2(bridge_slave_1) entered blocking state
[ 21.878170][ T285] bridge0: port 2(bridge_slave_1) entered disabled state
[ 21.890056][ T285] device bridge_slave_1 entered promiscuous mode
[ 21.904895][ T289] bridge0: port 2(bridge_slave_1) entered blocking state
[ 21.914649][ T289] bridge0: port 2(bridge_slave_1) entered disabled state
[ 21.927101][ T289] device bridge_slave_1 entered promiscuous mode
[ 22.000817][ T286] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.008822][ T286] bridge0: port 1(bridge_slave_0) entered disabled state
[ 22.018336][ T286] device bridge_slave_0 entered promiscuous mode
[ 22.042185][ T286] bridge0: port 2(bridge_slave_1) entered blocking state
[ 22.050716][ T286] bridge0: port 2(bridge_slave_1) entered disabled state
[ 22.061284][ T286] device bridge_slave_1 entered promiscuous mode
[ 22.095230][ T288] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.105286][ T288] bridge0: port 1(bridge_slave_0) entered disabled state
[ 22.112877][ T288] device bridge_slave_0 entered promiscuous mode
[ 22.122672][ T288] bridge0: port 2(bridge_slave_1) entered blocking state
[ 22.132954][ T288] bridge0: port 2(bridge_slave_1) entered disabled state
[ 22.146633][ T288] device bridge_slave_1 entered promiscuous mode
[ 22.198335][ T287] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.206955][ T287] bridge0: port 1(bridge_slave_0) entered disabled state
[ 22.217430][ T287] device bridge_slave_0 entered promiscuous mode
[ 22.240245][ T287] bridge0: port 2(bridge_slave_1) entered blocking state
[ 22.251294][ T287] bridge0: port 2(bridge_slave_1) entered disabled state
[ 22.260755][ T287] device bridge_slave_1 entered promiscuous mode
[ 22.342451][ T285] bridge0: port 2(bridge_slave_1) entered blocking state
[ 22.350838][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 22.359023][ T285] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.369740][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 22.382475][ T289] bridge0: port 2(bridge_slave_1) entered blocking state
[ 22.396121][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 22.408466][ T289] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.418670][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 22.450665][ T286] bridge0: port 2(bridge_slave_1) entered blocking state
[ 22.461638][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 22.470268][ T286] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.481126][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 22.546318][ T288] bridge0: port 2(bridge_slave_1) entered blocking state
[ 22.554524][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 22.566437][ T288] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.576642][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 22.594308][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 22.603684][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 22.613637][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 22.624441][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 22.633085][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 22.646063][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 22.657252][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 22.670552][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 22.683279][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 22.692655][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 22.715335][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 22.733757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 22.741771][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 22.755469][ T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.765727][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 22.801649][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 22.813187][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 22.823764][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 22.833037][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 22.846824][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 22.859282][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 22.874091][ T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.885738][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 22.901445][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 22.918337][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 22.931659][ T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.945238][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 22.959634][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 22.973604][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 22.989203][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 22.999232][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 23.009900][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 23.023663][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 23.035735][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 23.046543][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 23.058585][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 23.071946][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 23.082235][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 23.094157][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 23.107728][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 23.120757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 23.132118][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 23.143221][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 23.178750][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 23.192064][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 23.204047][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 23.214945][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 23.226726][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 23.239212][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 23.251016][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 23.261866][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 23.270724][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 23.280900][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 23.290946][ T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 23.302818][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 23.313295][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 23.324382][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 23.335116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 23.345094][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 23.357706][ T286] device veth0_vlan entered promiscuous mode
[ 23.371415][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 23.380583][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 23.393003][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 23.401366][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 23.412449][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 23.421908][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 23.441683][ T289] device veth0_vlan entered promiscuous mode
[ 23.449338][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 23.459742][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 23.472230][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 23.480708][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 23.497442][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 23.510566][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 23.530715][ T289] device veth1_macvtap entered promiscuous mode
[ 23.540376][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 23.550674][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 23.562804][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 23.574573][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 23.593553][ T285] device veth0_vlan entered promiscuous mode
[ 23.609661][ T286] device veth1_macvtap entered promiscuous mode
[ 23.619078][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 23.633371][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 23.645897][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 23.656002][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 23.667357][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 23.678468][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 23.687959][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 23.698434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 23.709303][ T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 23.719089][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 23.731468][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 23.743209][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 23.752961][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 23.780625][ T285] device veth1_macvtap entered promiscuous mode
[ 23.789671][ T286] request_module fs-gadgetfs succeeded, but still no fs?
[ 23.802246][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 23.811470][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 23.820817][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 23.828860][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 23.837965][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 23.849304][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 23.859889][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 23.870240][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 23.881927][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 23.894593][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 23.909731][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 23.918798][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 23.929494][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 23.957658][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 23.968354][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 23.978741][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 23.993258][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 24.005359][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 24.016068][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 24.027072][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 24.038520][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 24.049606][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 24.058781][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 24.073698][ T288] device veth0_vlan entered promiscuous mode
[ 24.088226][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 24.099044][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 24.108019][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 24.117657][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 24.128802][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 24.139032][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 24.154178][ T287] device veth0_vlan entered promiscuous mode
[ 24.170716][ T287] device veth1_macvtap entered promiscuous mode
[ 24.183781][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 24.193815][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 24.206382][ T316] tmpfs: Unknown parameter 'ÿÿ'
[ 24.213154][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 24.223081][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 24.232018][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 24.240809][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 24.249610][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 24.264525][ T316] FAULT_INJECTION: forcing a failure.
[ 24.264525][ T316] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 24.281667][ T316] CPU: 0 PID: 316 Comm: syz.3.8 Not tainted syzkaller #0
[ 24.289400][ T316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 24.296404][ T327] loop1: detected capacity change from 0 to 1024
[ 24.300277][ T316] Call Trace:
[ 24.300288][ T316]
[ 24.300295][ T316] __dump_stack+0x21/0x30
[ 24.300325][ T316] dump_stack_lvl+0x110/0x170
[ 24.326603][ T316] ? show_regs_print_info+0x20/0x20
[ 24.332518][ T316] ? __mutex_lock+0x551/0x12d0
[ 24.340103][ T316] dump_stack+0x15/0x20
[ 24.344937][ T316] should_fail+0x3ab/0x500
[ 24.351147][ T316] should_fail_usercopy+0x1a/0x20
[ 24.357838][ T316] _copy_from_user+0x20/0xd0
[ 24.362680][ T316] dev_ethtool+0xd7/0xfe0
[ 24.367554][ T316] ? ethtool_get_module_eeprom_call+0x160/0x160
[ 24.374315][ T316] ? __mutex_lock_slowpath+0xe/0x10
[ 24.380641][ T316] ? mutex_lock+0x112/0x1c0
[ 24.385877][ T316] ? wait_for_completion_killable_timeout+0x10/0x10
[ 24.393485][ T316] ? dev_get_by_name_rcu+0xc8/0xf0
[ 24.398777][ T316] dev_ioctl+0x45e/0xd00
[ 24.403669][ T316] sock_do_ioctl+0x241/0x310
[ 24.408992][ T316] ? sock_show_fdinfo+0xa0/0xa0
[ 24.414416][ T316] ? selinux_file_ioctl+0x3ad/0x4c0
[ 24.420201][ T316] ? alloc_file+0x448/0x580
[ 24.424800][ T316] sock_ioctl+0x459/0x6d0
[ 24.429155][ T316] ? sock_poll+0x3f0/0x3f0
[ 24.434279][ T316] ? __fget_files+0x2e1/0x340
[ 24.439257][ T316] ? security_file_ioctl+0x84/0xa0
[ 24.444908][ T316] ? sock_poll+0x3f0/0x3f0
[ 24.450158][ T316] __se_sys_ioctl+0x121/0x1a0
[ 24.455837][ T316] __x64_sys_ioctl+0x7b/0x90
[ 24.460957][ T316] x64_sys_call+0x2f/0x9a0
[ 24.465409][ T316] do_syscall_64+0x4c/0xa0
[ 24.469978][ T316] ? clear_bhb_loop+0x50/0xa0
[ 24.475505][ T316] ? clear_bhb_loop+0x50/0xa0
[ 24.480702][ T316] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 24.488022][ T316] RIP: 0033:0x7f6d880e5559
[ 24.493542][ T316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 24.520704][ T316] RSP: 002b:00007f6d86b3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 24.533274][ T316] RAX: ffffffffffffffda RBX: 00007f6d8836bfa0 RCX: 00007f6d880e5559
[ 24.542869][ T316] RDX: 0000200000000b80 RSI: 0000000000008946 RDI: 0000000000000004
[ 24.551469][ T316] RBP: 00007f6d8817cb20 R08: 0000000000000000 R09: 0000000000000000
[ 24.562114][ T316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 24.571579][ T316] R13: 00007f6d8836c038 R14: 00007f6d8836bfa0 R15: 00007ffceb37b008
[ 24.582503][ T316]
[ 24.602993][ T288] device veth1_macvtap entered promiscuous mode
[ 24.611251][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 24.618940][ T327] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[ 24.622631][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 24.646403][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 24.654057][ T327] EXT4-fs (loop1): invalid journal inode
[ 24.656267][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 24.661970][ T327] EXT4-fs (loop1): can't get journal size
[ 24.670263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 24.677567][ T329] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN
[ 24.684443][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 24.697892][ T329] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[ 24.697910][ T329] CPU: 1 PID: 329 Comm: syz.3.14 Not tainted syzkaller #0
[ 24.697937][ T329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 24.697944][ T329] RIP: 0010:tracing_release_file_tr+0x48/0x100
[ 24.697970][ T329] Code: 81 c3 d8 02 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 e6 1c 3c 00 48 8b 1b 48 83 c3 28 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 c9 1c 3c 00 48 8b 1b 48 85 db 74
[ 24.697981][ T329] RSP: 0018:ffffc900077e7d80 EFLAGS: 00010206
[ 24.697993][ T329] RAX: 0000000000000005 RBX: 0000000000000028 RCX: ffff88810d582800
[ 24.698003][ T329] RDX: 0000000000000000 RSI: ffff88810cb73500 RDI: ffff88812947f390
[ 24.698011][ T329] RBP: ffffc900077e7da0 R08: ffff8881053a14c7 R09: 1ffff11020a74298
[ 24.698021][ T329] R10: dffffc0000000000 R11: ffffed1020a74299 R12: 1ffff1102196e6a5
[ 24.698031][ T329] R13: ffff88810cb73500 R14: ffff88812947f390 R15: dffffc0000000000
[ 24.698040][ T329] FS: 0000555576e08500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 24.698052][ T329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 24.698063][ T329] CR2: 00005574f71f9560 CR3: 000000010e071000 CR4: 00000000003506a0
[ 24.708877][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 24.717325][ T329] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 24.717344][ T329] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 24.717353][ T329] Call Trace:
[ 24.717358][ T329]
[ 24.717363][ T329] ? tracing_open_file_tr+0x1a0/0x1a0
[ 24.717387][ T329] __fput+0x22b/0x900
[ 24.717403][ T329] ____fput+0x15/0x20
[ 24.736494][ T333] loop0: detected capacity change from 0 to 512
[ 24.742951][ T329] task_work_run+0x127/0x190
[ 24.742978][ T329] exit_to_user_mode_loop+0xd0/0xe0
[ 24.742992][ T329] exit_to_user_mode_prepare+0x87/0xd0
[ 24.743005][ T329] syscall_exit_to_user_mode+0x1a/0x30
[ 24.743019][ T329] do_syscall_64+0x58/0xa0
[ 24.743033][ T329] ? clear_bhb_loop+0x50/0xa0
[ 24.764719][ T327] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,abort,nombcache,,errors=continue. Quota mode: writeback.
[ 24.770679][ T329] ? clear_bhb_loop+0x50/0xa0
[ 24.770708][ T329] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 24.770723][ T329] RIP: 0033:0x7f6d880e5559
[ 24.770736][ T329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 24.770755][ T329] RSP: 002b:00007ffceb37b168 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 24.789536][ T327] capability: warning: `syz.1.13' uses 32-bit capabilities (legacy support in use)
[ 24.790308][ T329] RAX: 0000000000000000 RBX: 00007ffceb37b250 RCX: 00007f6d880e5559
[ 25.021768][ T329] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 25.031542][ T329] RBP: 0000000000006029 R08: 0000000000000001 R09: 0000000000000000
[ 25.039967][ T329] R10: 0000001b2db20000 R11: 0000000000000246 R12: 00007ffceb37b290
[ 25.050139][ T329] R13: 00007f6d8836bfac R14: 000000000000607c R15: 00007f6d8836bfa0
[ 25.060025][ T329]
[ 25.063575][ T329] Modules linked in:
[ 25.068841][ T329] ---[ end trace b47a3f52255264dc ]---
[ 25.077804][ T329] RIP: 0010:tracing_release_file_tr+0x48/0x100
[ 25.085986][ T329] Code: 81 c3 d8 02 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 e6 1c 3c 00 48 8b 1b 48 83 c3 28 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 c9 1c 3c 00 48 8b 1b 48 85 db 74
[ 25.113664][ T329] RSP: 0018:ffffc900077e7d80 EFLAGS: 00010206
[ 25.120929][ T333] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 25.122319][ T329] RAX: 0000000000000005 RBX: 0000000000000028 RCX: ffff88810d582800
[ 25.134986][ T333] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 25.143990][ T329] RDX: 0000000000000000 RSI: ffff88810cb73500 RDI: ffff88812947f390
[ 25.168878][ T333] FAULT_INJECTION: forcing a failure.
[ 25.168878][ T333] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[ 25.170849][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 25.183576][ T333] CPU: 0 PID: 333 Comm: syz.0.1 Tainted: G D syzkaller #0
[ 25.202317][ T333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 25.207016][ T329] RBP: ffffc900077e7da0 R08: ffff8881053a14c7 R09: 1ffff11020a74298
[ 25.212890][ T333] Call Trace:
[ 25.212897][ T333]
[ 25.212903][ T333] __dump_stack+0x21/0x30
[ 25.228468][ T338] loop1: detected capacity change from 0 to 512
[ 25.232103][ T333] dump_stack_lvl+0x110/0x170
[ 25.232132][ T333] ? show_regs_print_info+0x20/0x20
[ 25.256065][ T333] ? __kasan_check_read+0x11/0x20
[ 25.261989][ T333] ? free_unref_page_commit+0x187/0x3f0
[ 25.268354][ T333] dump_stack+0x15/0x20
[ 25.272882][ T333] should_fail+0x3ab/0x500
[ 25.277520][ T333] should_fail_alloc_page+0x55/0x80
[ 25.284300][ T333] prepare_alloc_pages+0x13f/0x590
[ 25.291675][ T333] ? __alloc_pages_bulk+0xab0/0xab0
[ 25.298524][ T333] ? release_pages+0x1264/0x12c0
[ 25.304080][ T333] __alloc_pages+0x11d/0x460
[ 25.312348][ T333] ? unlock_page_memcg+0x114/0x130
[ 25.319309][ T333] ? prep_new_page+0x110/0x110
[ 25.325482][ T333] ? page_remove_rmap+0xc6d/0xf40
[ 25.330788][ T333] ? page_add_file_rmap+0x700/0x700
[ 25.337268][ T333] ? __kasan_check_write+0x14/0x20
[ 25.342384][ T333] ? _raw_spin_lock+0x94/0xf0
[ 25.347143][ T333] __get_free_pages+0x10/0x30
[ 25.351846][ T333] __tlb_remove_page_size+0x18a/0x310
[ 25.357405][ T333] unmap_page_range+0x1059/0x1e00
[ 25.362439][ T333] ? __count_memcg_events+0xad/0x120
[ 25.367823][ T333] ? mmu_notifier_invalidate_range_end+0xe0/0xe0
[ 25.374793][ T333] ? activate_page+0x500/0x500
[ 25.379548][ T333] ? schedule_preempt_disabled+0x20/0x20
[ 25.385180][ T333] unmap_vmas+0x26d/0x380
[ 25.389616][ T333] ? unmap_page_range+0x1e00/0x1e00
[ 25.394813][ T333] ? __kasan_check_write+0x14/0x20
[ 25.400466][ T333] ? tlb_gather_mmu_fullmm+0x144/0x1c0
[ 25.406020][ T333] exit_mmap+0x412/0x8b0
[ 25.410552][ T333] ? vm_brk+0x30/0x30
[ 25.414922][ T333] ? mutex_unlock+0x8f/0x230
[ 25.419791][ T333] ? uprobe_clear_state+0x2c6/0x320
[ 25.424981][ T333] __mmput+0x92/0x300
[ 25.429137][ T333] mmput+0x50/0x150
[ 25.433811][ T333] do_exit+0xacc/0x29a0
[ 25.438444][ T333] ? getname_flags+0x272/0x510
[ 25.443664][ T333] ? user_path_at_empty+0x2f/0x1c0
[ 25.449052][ T333] ? put_task_struct+0x90/0x90
[ 25.453980][ T333] ? __kasan_check_write+0x14/0x20
[ 25.459532][ T333] ? _raw_spin_lock_irq+0x95/0xf0
[ 25.464914][ T333] do_group_exit+0x149/0x310
[ 25.469525][ T333] ? __kasan_check_write+0x14/0x20
[ 25.475892][ T333] ? recalc_sigpending+0x1ac/0x230
[ 25.481101][ T333] get_signal+0x64f/0x1430
[ 25.485635][ T333] ? hashlen_string+0x120/0x120
[ 25.490627][ T333] arch_do_signal_or_restart+0xe2/0x1100
[ 25.496262][ T333] ? kmem_cache_free+0x100/0x320
[ 25.501322][ T333] ? get_sigframe_size+0x10/0x10
[ 25.506267][ T333] ? __se_sys_futex+0x135/0x330
[ 25.511110][ T333] ? user_path_at_empty+0x56/0x1c0
[ 25.516219][ T333] exit_to_user_mode_loop+0xa7/0xe0
[ 25.523506][ T333] exit_to_user_mode_prepare+0x87/0xd0
[ 25.529113][ T333] syscall_exit_to_user_mode+0x1a/0x30
[ 25.535830][ T333] do_syscall_64+0x58/0xa0
[ 25.540440][ T333] ? clear_bhb_loop+0x50/0xa0
[ 25.546342][ T333] ? clear_bhb_loop+0x50/0xa0
[ 25.551044][ T333] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 25.557927][ T333] RIP: 0033:0x7f2845657559
[ 25.563126][ T333] Code: Unable to access opcode bytes at RIP 0x7f284565752f.
[ 25.570938][ T333] RSP: 002b:00007f28440af0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 25.580704][ T333] RAX: 0000000000000001 RBX: 00007f28458ddfa8 RCX: 00007f2845657559
[ 25.589750][ T333] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f28458ddfac
[ 25.598809][ T333] RBP: 00007f28458ddfa0 R08: 000831b3725ee000 R09: 0000000000000000
[ 25.608644][ T333] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 25.617743][ T333] R13: 00007f28458de038 R14: 00007fff4ba36610 R15: 00007fff4ba366f8
[ 25.626636][ T333]
[ 25.632190][ T329] R10: dffffc0000000000 R11: ffffed1020a74299 R12: 1ffff1102196e6a5
[ 25.644770][ T338] EXT4-fs (loop1): 1 truncate cleaned up
[ 25.650878][ T329] R13: ffff88810cb73500 R14: ffff88812947f390 R15: dffffc0000000000
[ 25.660783][ T338] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,data_err=ignore,nouid32,errors=remount-ro,jqfmt=vfsv1,noauto_da_alloc,stripe=0x0000000000000005,. Quota mode: writeback.
[ 25.667149][ T30] kauditd_printk_skb: 49 callbacks suppressed
[ 25.667165][ T30] audit: type=1400 audit(1792725442.878:123): avc: denied { remove_name } for pid=285 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 25.681340][ T329] FS: 0000555576e08500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 25.688735][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 25.710746][ T329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 25.721730][ T30] audit: type=1400 audit(1792725442.878:124): avc: denied { rmdir } for pid=285 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 25.728721][ T329] CR2: 0000000000000000 CR3: 000000010e071000 CR4: 00000000003506b0
[ 25.736818][ T30] audit: type=1400 audit(1792725442.878:125): avc: denied { unlink } for pid=285 comm="syz-executor" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 25.760696][ T329] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 25.771113][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 25.793055][ T329] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 25.810860][ T30] audit: type=1400 audit(1792725442.878:126): avc: denied { unlink } for pid=285 comm="syz-executor" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[ 25.820711][ T329] Kernel panic - not syncing: Fatal exception
[ 25.849942][ T329] Kernel Offset: disabled
[ 25.862349][ T329] Rebooting in 86400 seconds..