last executing test programs: 4.716978618s ago: executing program 0 (id=1171): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d00208500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) rt_sigqueueinfo(0x0, 0x33, &(0x7f0000000d40)={0x10000, 0xc4, 0xff800002}) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1010012, &(0x7f0000000080)={[{@nobh}, {@bsdgroups}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000001740)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x603f) 3.809745356s ago: executing program 0 (id=1181): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xf, 0x0, &(0x7f0000000040)="f6f4e9a100012a8bc778bba1449678", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)="01", 0x0}, 0x50) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}}, 0x0) close(r2) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x1, @remote, 0xb0e7}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendto$packet(r4, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0xf6, r7, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) write$selinux_validatetrans(0xffffffffffffffff, 0x0, 0x7c) 3.305322845s ago: executing program 0 (id=1185): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x21c91c, &(0x7f0000000900)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@mblk_io_submit}, {@jqfmt_vfsold}, {@nodelalloc}, {@nomblk_io_submit}, {@usrjquota}, {@minixdf}, {@resgid, 0x32}]}, 0x1e, 0x4ea, &(0x7f00000009c0)="$eJzs3VFrW9cdAPD/la3MSZzZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYR9gMMY22NOe9jLoByiUfIRSCLTvpS0tpU3ah0LbqOhKShxHip1GllLr94MjnXt0r/7nXKGje+49XAXQt05HxJmIeFitVs9FxEijPNNIsVVPtfUe3L89W0tJVKvXPkoiknpZbbXxbe95tLHZUET8/jcRf0qejlve2FyaKRYLa43lfGV5NV/e2Dy/uDyzUFgorExNTV6avjx9cXqiI+0cjogrv3rvn3/736+vvPaTm29f/2D8z0mjPOJxOzqt3vRsui+aBiNibT+C9chg2kIAAL4Jmsf5P4yIczESA+nRHAAAAHCQVH8+HF8kEVUAAADgwMqkc2CTTK4xD2A4Mplcrj6H97txJFMslSs/ni+tr8zV58qORjYzv1gsTDTmCo9GNqktT6b5x8sXdixPRcTxiPjHyOF0OTdbKs71+uQHAAAA9ImjO8b/n47Ux//bfN6zygEAAACdM9rrCgAAAAD7zvgfAAAADj7jfwAAADjQfnv1ai1Vm/9/PXdjY32pdOP8XKG8lFten83NltZWcwul0kJ6z77l3d6vWCqt/jRW1m/lK4VyJV/e2Ly+XFpfqVxffOIvsAEAAIAuOv6Du28lEbH1s8NpqjnU60oBXTH4PCu/u3/1ALpvoNcVAHrmuX7/gQMl2+sKAD2X7PJ628k7r3e+LgAAwP4Y+17r6/8Du54b2Mp0qYrAPnH+D/qX6//Qv1z/h/6VjYEwkIf+ttstQIfajRX2fP2/Wn3uSgEAAB01nKYkk4tIzwMMRyaTy0UcS8cE2WR+sViYiIhvR8SbI9lv1ZYn0y2TXecMAwAAAAAAAAAAAAAAAAAAAAAAAAB11WoSVQAAAOBAi8i8n6R3848YGzk7vPP8wKHks5H0OSJu/ufav27NVCprk7Xyjx+VV/7dKL/QizMYAAAAwE7NcXpzHA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfTg/u3ZZupm3A9/GRGjreIPxlD6PBTZiDjySRKD27ZLImKgA/G37kTEiVbxk1q1YrRRi1bxD/c4/tEOxId+drfW//yi1fcvE6fT59bfv0tpD/Xi2vd/mUf930CL+LWyY3uMcfLeK/m28e9EnBxs3f804ydt+p8ze4z/xz9sbrZ7rfrfiLGWvz/JE7HyleXVfHlj8/zi8sxCYaGwMjU1eWn68vTF6Yn8/GKx0HhsGePv33/14bPaf6RN/NFd2n92j+3/8t6t+9+pZ7OPNk8exx8/0/rzP9Emfqbx+f+oka+9PtbMb9Xz2536/xunntX+uTbt3+3zH99j+8/97q/v7HFVAKALyhubSzPFYmGtrzMvtDdqh0UvRStezkxtv379zYf2tYZ/2V6SdObrUDsyfzn2/ItletotAQAA++DpMTAAAAAAAAAAAAAAAAAAAADQbd24nVh2R8yt9LETd88HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOicrwIAAP///B/QPg==") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000000), 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r2, 0x0) accept4$vsock_stream(r2, 0x0, 0x0, 0x800) shutdown(r2, 0x1) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000180)={0x20000012}) 3.217480837s ago: executing program 2 (id=1187): r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000003c0)=0xe8, 0xfed3) sendto$inet6(r0, 0x0, 0x0, 0x4000840, 0x0, 0x0) 3.131778989s ago: executing program 2 (id=1188): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x2000000, &(0x7f0000000cc0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYBLOB="2c6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c636865636b3d7374726963742c7569643d014ddfd7528e2abb611ab9a6f0020c71e7e4e129d3efc1207d122e24d0e5aa9f74b3e95844d340377ad31e1f1e55ff56785ca0655fe348172e188e19180ebcd1c5f60e6bfb3d4b232394a70ed43896502c1fad07eca5cc4ad532127749fa88b2dcb188a93734b11220cfed988675869e05f19923", @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee01, @ANYBLOB=',unhide,hide,session=0x0000000000000049,sbsector=0x0000000080000001,norock,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x943, &(0x7f0000001500)="$eJzs3c1vHGcZAPBnNl7iuFWakrRx3ENXTYxMBM7uRkmIcsHxrp0tthfZjtSKi4G4KIqhiIIUKg5BQpyI4IA4wC1HThG99ITyV3Dgkj+AS8TJN1fv7PojzX44luN13d9Pmp2dmWfe55l9Z+eVP3Yn+Crb2NjIpz0u3/7nQRbL4XOz9vTR44dp+v1afCOOxZXs84jhiChFDEXEaERxurbYnO/T0L2IlYh4EpFFxPFozXdlJbI/x+vby08i+0fK29uum6eHDb7WBn3+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAYZRN18rlShZzjYXbH5S6y28B3mP7ZnvNQnosNPvmjcjSFMPDm7f6Hj29vfmt9PBenG0tnc1vSB7D8elrb5+6cXqosLl/j4IOxCe//fTej9fWVn816EIGZLa+0FhqNuanZuulxlKzdP3q1fKlWzNLpZnGXH3pw6Xl+nxperE+tdxcLE1Mf7tUuX79cqk++WHz9sJsbWquvrny2ner5fLV0vuTP6xPLS41Fy69P7k0fasxN9dYmM1j0uYUcy2diD9oLJeW61PzpdJHd9dWL/crMgVVdhNU7RdULVerlUq1Wrl65fqVa+Xy0Asryl8SL0QM/qRlsPb9Gg57tdEe/wEAAICjK8t/x55+/i/mv4fPYqYxVy8PuiwAAABgH+V/+T+bZsWIONFe6+d/AAAAOEr6f8aub0T2nTjXijh3pzW/04741/E8YmSmMVefnG7O3ajEt7Y+7de5tWL+7wcXY6wVNTbSmo+0o9qfHBxOUZXJG5W4GO+0It6ZOJ9m5yd2RGYR+b8zVFuR7U/elDYji1uvwlabl1MkABx17/UZj3cz/l+M8VbE+FgadmNorMNoXTayAsBhsfUNNq/wyaCPEQB4nlEaAAAAAAAAAAAAAAAAAAAAAAAAAAAA9t9BfP+/J5548lV7MugrEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA11MWcazT+kLE8YgoR8Slg6/q1Xkw6AIGLFuP9bgfJwddBwAAAAAAAAAAAAAAAAAAAAAAAAAAAADAUdP+/v9CtOavtVbFUCFiPCJWIuJHg65xTzre1SBi/aDrOGR2fP9/6vPYyGKo1e2RFadri8351P35vR8KTx89fpim9q4/f5k8qYGU4bluaGfovteb+V4jtdVP7v3641+WajfzIm8uz8zV5mcXv78d+Hb2WUQpWtOmE+16fzf+7790OPLP0pHuLu9Mnrf2Yt6znfZ+2jNvL3fXVqsp03L9g+Xf/OLu/R2bvhljEecnIiaez/SzNHXJNBbFXtmyZ9kfs5Pxt1jJ+z+9GtlGlrrojfz4T3x0d2118qcfr93pUtOpGI2IOxHDu69pNL+edJSfdYViylrOg9LDmT7t9bSjxUqXY3gzzkXEyEsdw7nux5Dr87q3K7rcpaLT8e5L9/S7fTJ2lD3L/pvdiv/EH3bc/6OQ+n88dvPuTDF55I4zpWtkoRWZH3m1Z5td35XsTaHXxj/FT+J7W/1f2HH9b/fVwVyPdmR89e+L7UHozJdGpPbVp1uV7TrPtKK61PlWXIgYGnupK8qFPleUF/cv7uI4+8ieZX/PJuL/8cD9fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMMvizjWaX0hYjwiTkXEG2m5FLGxH/kKI1n87+R+tLQ3DwaX+lDI1mM97scAewAAAAAAAACA/XSz9vTR44dpytLisbiQfR4x3PpL/1BEnMr+WpyuLTbn+zRUjFiJiCd7qCHtF69vLz9JS6N7aAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCPriwAAAP//hO21Ig==") 3.011177321s ago: executing program 2 (id=1192): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) ptrace$getregset(0x4204, r2, 0x1, &(0x7f00000001c0)={0x0}) (fail_nth: 6) 1.779775286s ago: executing program 2 (id=1194): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d00208500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigqueueinfo(0x0, 0x33, &(0x7f0000000d40)={0x10000, 0xc4, 0xff800002}) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$F_GET_RW_HINT(r2, 0x40b, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1010012, &(0x7f0000000080)={[{@nobh}, {@bsdgroups}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r3, &(0x7f0000001740)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x603f) 1.619567789s ago: executing program 1 (id=1197): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) epoll_create1(0x80000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendfile(r1, r0, &(0x7f0000000140)=0x7, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x18) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r7 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0}) io_uring_enter(r7, 0x3498, 0x969, 0x0, 0x0, 0x0) dup3(r7, r5, 0x80000) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000580)='./file1\x00', 0x1008014, &(0x7f0000000280)=ANY=[@ANYRES16=r3, @ANYRES8], 0x3, 0x7bf, &(0x7f0000000d80)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x18) r12 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r12, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r12, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1.610045869s ago: executing program 3 (id=1199): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) fspick(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x1) 1.56504727s ago: executing program 4 (id=1200): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req={0x1, 0x9, 0x7, 0x8001}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x1082302, 0x0) ioctl$TIOCGWINSZ(r4, 0x5413, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x1, 0xff, 0x0, 0x0, 0x0, 0x2422, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x4a90, 0x0, 0x0, 0x0, 0xa47}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0x3, 0x6}, {0xd, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 1.462329382s ago: executing program 3 (id=1201): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r2, @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004) 1.460631181s ago: executing program 2 (id=1202): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x2000000, &(0x7f0000000cc0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYBLOB="2c6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c636865636b3d7374726963742c7569643d014ddfd7528e2abb611ab9a6f0020c71e7e4e129d3efc1207d122e24d0e5aa9f74b3e95844d340377ad31e1f1e55ff56785ca0655fe348172e188e19180ebcd1c5f60e6bfb3d4b232394a70ed43896502c1fad07eca5cc4ad532127749fa88b2dcb188a93734b11220cfed988675869e05f19923", @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee01, @ANYBLOB=',unhide,hide,session=0x0000000000000049,sbsector=0x0000000080000001,norock,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x943, &(0x7f0000001500)="$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") 1.391251513s ago: executing program 3 (id=1203): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5d371c61f550e9d86aabda45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0db2b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec08647566b1bdd75d6a9a1e600aaf0f42ce94b4725d4c2da80150dc34e5975d6904f061ed9a7608959f2d24ee6ec4f2395d16e02f53c746f74b12013f738d76456c3407188eff97f31ca36e5d79e1f1c7c3b688ee21d37ba5ebf4afc2a61f16"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x9}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="ffff06000f00ff07ff073f0d05008100986c5be270422707407b26be58a5a8a162eeb669d07f06b45fa2d93a0f78b80a8e441d989ea9089e8382ecfc7ec151c5c990278859a9db2dad57f274b31c1affd5874fede97469097c2fb247d78d203dd0fa76d4ed61498765354a4a135e8e5879ff885242f45e"], 0x14) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) unshare(0x22020400) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x51502, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1.343319354s ago: executing program 2 (id=1204): r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/181, 0xb5}], 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x14, 0xf, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x200000, 0x0, 0x0, 0x0, 0x48, '\x00', r3, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.135462288s ago: executing program 0 (id=1205): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigqueueinfo(0x0, 0x33, &(0x7f0000000d40)={0x10000, 0xc4, 0xff800002}) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$F_GET_RW_HINT(r2, 0x40b, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1010012, &(0x7f0000000080)={[{@nobh}, {@bsdgroups}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000001740)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x603f) 1.134673858s ago: executing program 3 (id=1206): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x80, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) 832.382114ms ago: executing program 1 (id=1207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x3b51, &(0x7f00000006c0)={0x0, 0x7758, 0x1000, 0x8003, 0x1bf}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r1, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) 667.655927ms ago: executing program 4 (id=1208): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f00000003c0)=0xe8, 0xfed3) sendto$inet6(r1, 0x0, 0x0, 0x4000840, &(0x7f0000000240)={0xa, 0x4e23, 0x8be6, @mcast2}, 0x1c) 560.198429ms ago: executing program 4 (id=1209): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000001740)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 469.156571ms ago: executing program 4 (id=1210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[], 0x64}}, 0x0) 468.470931ms ago: executing program 0 (id=1211): perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xa, 0xffffffffffffffff, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r1, 0x111, 0x6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000efffffff6d6a1001000000009500000000800000"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2, 0x0, 0x400007}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4008040) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)}, 0xc001) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) r8 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') dup(r5) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 415.854602ms ago: executing program 4 (id=1212): prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x25dfdbfd, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10) getrandom(0x0, 0x0, 0x0) write$selinux_create(r2, &(0x7f0000000040)=@objname={'system_u:object_r:tmp_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x2, 0x20, './file0\x00'}, 0x4f) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000240)='cpu.pressure\x00', 0x2, 0x0) close_range(r0, r6, 0x2) r7 = socket(0x10, 0x803, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000000)=0xff) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000280)={0x0, @private, @loopback}, &(0x7f00000001c0)=0xc) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x6, r8, 0x1, 0x4, 0x6, @local}, 0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000007c000000060a0104000000000000000001000000540004802000018007000100727400001400028008000240000000030800014000000003240c01800b00010072656a656374000014000280080101400000000105000200000000000c000180080001006669620008000b40000000000900010073797a300000000014000000110001"], 0x104}}, 0x0) r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x69, 0x2}, 0x18) fspick(r10, &(0x7f0000000440)='./file0\x00', 0x1) r11 = socket(0x840000000002, 0x3, 0xff) recvmsg$can_raw(r11, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delqdisc={0x60, 0x25, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xffe9, 0xf}, {0xffe0, 0x7}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffff9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xfff, "f3c988490e5b72f3c7221bd0d3d962d2"}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040050) 411.001082ms ago: executing program 1 (id=1213): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000540)="1a", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x110, @loopback}, 0x1c) 383.006263ms ago: executing program 1 (id=1214): r0 = socket$unix(0x1, 0x1, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) open(&(0x7f0000000300)='./file0\x00', 0x105042, 0x100) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 314.736824ms ago: executing program 1 (id=1215): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x2000000, &(0x7f0000000cc0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYBLOB="2c6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c636865636b3d7374726963742c7569643d014ddfd7528e2abb611ab9a6f0020c71e7e4e129d3efc1207d122e24d0e5aa9f74b3e95844d340377ad31e1f1e55ff56785ca0655fe348172e188e19180ebcd1c5f60e6bfb3d4b232394a70ed43896502c1fad07eca5cc4ad532127749fa88b2dcb188a93734b11220cfed988675869e05f19923", @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee01, @ANYBLOB=',unhide,hide,session=0x0000000000000049,sbsector=0x0000000080000001,norock,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x943, &(0x7f0000001500)="$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") 290.824834ms ago: executing program 3 (id=1216): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0xf5ff, 0x0) 251.903435ms ago: executing program 4 (id=1217): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x40001}, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000300)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000785ceb2500000000002020207b1af8ff00000000bfa100000400000007010000f8ffffffb702000008000000b703000000000000850000002d000000955cb9f4831dcc95cf28e0a3af158067cdc5b4596115f7036c7bd0751c505114d644"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r5, 0x2007ffc) 250.173205ms ago: executing program 0 (id=1218): perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xa, 0xffffffffffffffff, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r1, 0x111, 0x6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000015850000001700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r3, 0x0, 0x400007}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x58, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x1000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xee}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x10001}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a8001600", 0x34}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040", 0x30}], 0x1}, 0xc001) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r8, 0x0, 0xffffffffffffffff}, 0x18) r9 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') dup(r6) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x759, &(0x7f0000000a40)={[{@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@nomblk_io_submit, 0x0}, {@data_journal}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@i_version}, {@nobarrier}, {@init_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xb6a}}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$eJzs3ElvHFUeAPB/te04zjL2ZNYsM+mZzAgLRBw764FDgkDKBQkJhMLR2E4U4iQoNlISWcRBKEgcQPkELDckPgEnuCBAHEBcibgipAj5ksABFarqatN2ub2l7cbx7yd151XVq37v31Uv/ZZuB7BpVbOnJGJHRHwXEb21zbkZqrV/7s9Mjfw8MzWSRJo+91OS57s3MzVSz1o/b3ux0V+JqLyRxN5ysd0T165fGB4fH7tS7BiYrBSpi8Pnxs6NXRo6ceLI4Z7jx4aOtiTOrE739rx2ed/u0y/efmbkzO2Xvvgoq29aHG+Mo6Yvf96y7BI6SnuqUZ37Xjb4//KrviHsbEgnndlzpX2VYdmyuza7XF15+++Njnyrpjeefr2tlQPWVJqmaXdp7+xn2XTaKElqJ6TpzRR4CCTR7hoA7VH/oL83k41Up0bK4+CH291TkY+AsrjvF4/akc58BFvtq42Nutao/L9GxJnpX97NHrHgPAQAQGt9cipiW9HvqD9qRyrx94Z8fyrWhvoi4s8RsSsi/lL0X/4Wkef9R0T8s+GcHctYBajO2y73f77pKRKN3dWWyfp/TxRrW3P7f7M17+sotnbm8XclZ8+Pjx0q3pP+6OrOtgfLLz07rfbpU9++06z8akP/L3tk5df7gkU9fuycN0E3Ojw5/KBx1929mb+xN8rxJ9GZ1FMRuyNizypeP3vPzj/64b5mx+fEn8VZiv/t5i/euYoKzZO+H/FI7fpPx7z4o1j/S/L1yYuvDExcu/74+cb1ycHjx4aODmyN8bFDA/W7ouzLr289WyRLw4hFrn+9aazpQlp2/bcteP/Prlz2ZanZ9dqJlZdx686bTcc0q73/tyTP5+n6+uzV4cnJK4MRW5Lp8v6h38+9OtwzJ38Wf/+Bhdv/rohf3yvO2xsR2U38r4j4d0TsL+r+n4j4b0QcWCT+z5/838vNhpBLx7+2svhHV3T9myVOfhWx8KGOC599XCr4rWop/q5odv2P5Kn+Ys/o8OTWpeJarKaNiQd+AwEAAGAD2J/P0yaVg8VE046oVA4ejNg+O4MyMfnY2cuvXhqtzef2RVelPtPV2zAfOljMDWfb2VlDDdvZ8cP5vHGapmlPtp2N38d3tjd02PS2N2n/mR/KP2kBHjYrWkdr9os2YEOa3/7vLPvM1n8hA1hfLfgeDbBBaf+weS27/a/Vr+CAtlmo/d+IuN+GqgDrbKH2/0Jpz8l1qQuwvoz/YfNaffv3ZQDY6Hz+w6a0rB/JryKx6/QieZLOtSm0eaISi/8VgL6I+p56n2bxF/y+EtGaGna0NNKeOde0smCerdGKsqKyZJ7OFfwhhvVNVP4Y1agluiNiibt39ma7UU9cX+uK5Y3gg/b+7wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDgfgsAAP//RUTTKw==") 183.771436ms ago: executing program 3 (id=1219): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x3b51, &(0x7f00000006c0)={0x0, 0x7758, 0x1000, 0x8003, 0x1bf}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r1, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) 0s ago: executing program 1 (id=1220): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x80, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f00000009c0)=0x1d, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x2000000, &(0x7f0000000cc0)=ANY=[@ANYRESHEX, @ANYRESHEX=0x0, @ANYBLOB="2c6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c636865636b3d7374726963742c7569643d014ddfd7528e2abb611ab9a6f0020c71e7e4e129d3efc1207d122e24d0e5aa9f74b3e95844d340377ad31e1f1e55ff56785ca0655fe348172e188e19180ebcd1c5f60e6bfb3d4b232394a70ed43896502c1fad07eca5cc4ad532127749fa88b2dcb188a93734b11220cfed988675869e05f19923", @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee01, @ANYBLOB=',unhide,hide,session=0x0000000000000049,sbsector=0x0000000080000001,norock,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x943, &(0x7f0000001500)="$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") kernel console output (not intermixed with test programs): 67] netlink: 8 bytes leftover after parsing attributes in process `syz.4.441'. [ 63.921878][ T5267] IPVS: Error joining to the multicast group [ 63.953558][ T5267] loop4: detected capacity change from 0 to 2364 [ 63.960555][ T5267] iso9660: Unknown parameter '0x000000000000002a0x0000000000000000' [ 64.278296][ T5284] loop0: detected capacity change from 0 to 512 [ 64.301266][ T5286] loop2: detected capacity change from 0 to 1024 [ 64.313391][ T5284] EXT4-fs: Ignoring removed nobh option [ 64.323636][ T5284] EXT4-fs (loop0): failed to initialize system zone (-117) [ 64.330911][ T5284] EXT4-fs (loop0): mount failed [ 64.356459][ T5286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.550759][ T5308] SELinux: failed to load policy [ 64.636721][ T5312] loop4: detected capacity change from 0 to 512 [ 64.661113][ T5312] EXT4-fs: Ignoring removed nobh option [ 64.681788][ T5314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.689990][ T5312] EXT4-fs (loop4): failed to initialize system zone (-117) [ 64.691815][ T5314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.698453][ T5312] EXT4-fs (loop4): mount failed [ 64.713446][ T5314] netlink: 'syz.1.454': attribute type 13 has an invalid length. [ 64.721239][ T5314] netlink: 'syz.1.454': attribute type 17 has an invalid length. [ 64.747578][ T5314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 64.774412][ T5314] netlink: 'syz.1.454': attribute type 2 has an invalid length. [ 64.792046][ T5312] SELinux: failed to load policy [ 64.820879][ T5325] loop4: detected capacity change from 0 to 512 [ 64.831660][ T5325] EXT4-fs: Ignoring removed nobh option [ 64.848467][ T5325] EXT4-fs (loop4): failed to initialize system zone (-117) [ 64.856997][ T5325] EXT4-fs (loop4): mount failed [ 64.903720][ T5325] SELinux: failed to load policy [ 64.909239][ T5332] FAULT_INJECTION: forcing a failure. [ 64.909239][ T5332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.922471][ T5332] CPU: 1 UID: 0 PID: 5332 Comm: syz.0.460 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.922573][ T5332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 64.922660][ T5332] Call Trace: [ 64.922667][ T5332] [ 64.922676][ T5332] __dump_stack+0x1d/0x30 [ 64.922702][ T5332] dump_stack_lvl+0xe8/0x140 [ 64.922730][ T5332] dump_stack+0x15/0x1b [ 64.922793][ T5332] should_fail_ex+0x265/0x280 [ 64.922820][ T5332] should_fail+0xb/0x20 [ 64.922871][ T5332] should_fail_usercopy+0x1a/0x20 [ 64.922941][ T5332] copy_fpstate_to_sigframe+0x628/0x7d0 [ 64.922983][ T5332] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 64.923026][ T5332] ? kmem_cache_free+0xdf/0x300 [ 64.923061][ T5332] ? x86_task_fpu+0x36/0x60 [ 64.923162][ T5332] get_sigframe+0x34d/0x490 [ 64.923183][ T5332] ? get_signal+0xdc8/0xf70 [ 64.923208][ T5332] x64_setup_rt_frame+0xa8/0x580 [ 64.923231][ T5332] arch_do_signal_or_restart+0x27c/0x480 [ 64.923251][ T5332] ? 0xffffffff81000000 [ 64.923295][ T5332] irqentry_exit_to_user_mode+0x5e/0xa0 [ 64.923321][ T5332] irqentry_exit+0x12/0x50 [ 64.923342][ T5332] asm_exc_page_fault+0x26/0x30 [ 64.923415][ T5332] RIP: 0033:0x7f31ac897739 [ 64.923433][ T5332] Code: f8 77 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 [ 64.923454][ T5332] RSP: 002b:00007f31ab31e7c8 EFLAGS: 00010283 [ 64.923470][ T5332] RAX: 0000000000000000 RBX: 00007f31ab31ed30 RCX: 00007f31acab8120 [ 64.923559][ T5332] RDX: ffffffff81000000 RSI: 00007f31ac941b31 RDI: ffffffff81000000 [ 64.923573][ T5332] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 64.923587][ T5332] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000073 [ 64.923649][ T5332] R13: 00007f31ab31eeb0 R14: ffffffff81000000 R15: 0000000000000000 [ 64.923666][ T5332] ? 0xffffffff81000000 [ 64.923685][ T5332] ? 0xffffffff81000000 [ 64.923699][ T5332] ? 0xffffffff81000000 [ 64.923754][ T5332] [ 65.138612][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.239605][ T5338] loop2: detected capacity change from 0 to 1024 [ 65.298151][ T5342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.327580][ T5342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.345198][ T5338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.359044][ T5342] netlink: 'syz.4.464': attribute type 13 has an invalid length. [ 65.366853][ T5342] netlink: 'syz.4.464': attribute type 17 has an invalid length. [ 65.385287][ T5342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 65.404050][ T5342] netlink: 'syz.4.464': attribute type 2 has an invalid length. [ 65.416618][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.475205][ T29] kauditd_printk_skb: 554 callbacks suppressed [ 65.475222][ T29] audit: type=1326 audit(1757022252.438:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3155ccebe9 code=0x7ffc0000 [ 65.533761][ T29] audit: type=1326 audit(1757022252.438:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3155ccebe9 code=0x7ffc0000 [ 65.557334][ T29] audit: type=1326 audit(1757022252.438:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f3155ccebe9 code=0x7ffc0000 [ 65.580769][ T29] audit: type=1326 audit(1757022252.438:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3155ccebe9 code=0x7ffc0000 [ 65.604270][ T29] audit: type=1326 audit(1757022252.438:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3155ccebe9 code=0x7ffc0000 [ 65.677807][ T5355] can0: slcan on ttyS3. [ 65.709555][ T29] audit: type=1400 audit(1757022252.668:2881): avc: denied { create } for pid=5358 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.763216][ T5355] can0 (unregistered): slcan off ttyS3. [ 65.775297][ T5362] can0: slcan on ttyS3. [ 65.793104][ T5355] loop3: detected capacity change from 0 to 512 [ 65.803759][ T5355] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.819098][ T5368] loop1: detected capacity change from 0 to 1024 [ 65.846932][ T5355] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 65.867702][ T5355] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 65.887533][ T5355] System zones: 1-12 [ 65.892206][ T5368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.904520][ T5355] EXT4-fs (loop3): orphan cleanup on readonly fs [ 65.923459][ T5355] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.469: bg 0: block 361: padding at end of block bitmap is not set [ 65.963527][ T5355] EXT4-fs (loop3): Remounting filesystem read-only [ 65.988999][ T5355] EXT4-fs (loop3): 1 truncate cleaned up [ 65.996392][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.007691][ T5355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 66.050319][ T5389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.473'. [ 66.061563][ T5389] ip6gre3: entered allmulticast mode [ 66.067570][ T5385] can0 (unregistered): slcan off ttyS3. [ 66.089315][ T5385] can0: slcan on ttyS3. [ 66.109966][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 66.124108][ T5385] loop4: detected capacity change from 0 to 512 [ 66.143796][ T5385] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.256865][ T5385] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 66.299124][ T5385] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 66.309562][ T5385] System zones: 1-12 [ 66.315430][ T5385] EXT4-fs (loop4): orphan cleanup on readonly fs [ 66.327032][ T5385] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.472: bg 0: block 361: padding at end of block bitmap is not set [ 66.365066][ T5385] EXT4-fs (loop4): Remounting filesystem read-only [ 66.371721][ T5385] EXT4-fs (loop4): 1 truncate cleaned up [ 66.384891][ T5385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 66.414546][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 66.431085][ T5398] loop3: detected capacity change from 0 to 1024 [ 66.438096][ T5398] EXT4-fs: Ignoring removed orlov option [ 66.443824][ T5398] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.460873][ T5398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.513987][ T29] audit: type=1326 audit(1757022253.478:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5425 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3155ccebe9 code=0x7ffc0000 [ 66.537373][ T29] audit: type=1326 audit(1757022253.478:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5425 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3155ccebe9 code=0x7ffc0000 [ 66.560835][ T29] audit: type=1326 audit(1757022253.478:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5425 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f3155ccebe9 code=0x7ffc0000 [ 66.584171][ T29] audit: type=1326 audit(1757022253.478:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5425 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3155ccebe9 code=0x7ffc0000 [ 66.717819][ T5430] netlink: 168 bytes leftover after parsing attributes in process `syz.4.476'. [ 66.833171][ T5436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.841815][ T5436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.900848][ T5431] netlink: 'syz.1.480': attribute type 13 has an invalid length. [ 66.908670][ T5431] netlink: 'syz.1.480': attribute type 17 has an invalid length. [ 66.943063][ T5430] can0 (unregistered): slcan off ttyS3. [ 66.949066][ T5431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 66.986623][ T5431] netlink: 'syz.1.480': attribute type 2 has an invalid length. [ 67.058299][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.175033][ T5454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.187952][ T5454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.199462][ T5454] netlink: 'syz.3.483': attribute type 13 has an invalid length. [ 67.218680][ T5454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.327197][ T5458] loop4: detected capacity change from 0 to 1024 [ 67.334560][ T5458] EXT4-fs: Ignoring removed orlov option [ 67.340282][ T5458] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.374863][ T5458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.453715][ T5463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'. [ 67.488247][ T5463] ip6gre2: entered allmulticast mode [ 67.883404][ T5477] vhci_hcd: invalid port number 96 [ 67.888785][ T5477] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 68.248397][ T5501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.264923][ T5501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.304203][ T5483] loop3: detected capacity change from 0 to 1024 [ 68.311117][ T5483] EXT4-fs: Ignoring removed orlov option [ 68.316942][ T5483] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.324003][ T5501] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 68.330408][ T5483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.356692][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.526825][ T5516] can0: slcan on ttyS3. [ 68.544878][ T5516] loop0: detected capacity change from 0 to 512 [ 68.567146][ T5516] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.579595][ T5512] can0 (unregistered): slcan off ttyS3. [ 68.587465][ T5516] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 68.602182][ T5522] can0: slcan on ttyS3. [ 68.616705][ T5516] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 68.639719][ T5516] System zones: 1-12 [ 68.644375][ T5516] EXT4-fs (loop0): orphan cleanup on readonly fs [ 68.651203][ T5516] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.505: bg 0: block 361: padding at end of block bitmap is not set [ 68.667101][ T5516] EXT4-fs (loop0): Remounting filesystem read-only [ 68.673830][ T5516] EXT4-fs (loop0): 1 truncate cleaned up [ 68.680421][ T5516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 68.709471][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 68.715281][ T5530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'. [ 68.732114][ T5530] ip6gre4: entered allmulticast mode [ 68.823136][ T5482] can0 (unregistered): slcan off ttyS3. [ 68.889113][ T5539] can0: slcan on ttyS3. [ 68.906347][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.924217][ T5539] can0 (unregistered): slcan off ttyS3. [ 68.933395][ T5539] can0: slcan on ttyS3. [ 68.956256][ T5539] loop1: detected capacity change from 0 to 512 [ 68.983616][ T5539] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.007578][ T5539] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 69.038624][ T5539] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 69.065884][ T5539] System zones: 1-12 [ 69.070498][ T5539] EXT4-fs (loop1): orphan cleanup on readonly fs [ 69.078905][ T5539] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.510: bg 0: block 361: padding at end of block bitmap is not set [ 69.094587][ T5539] EXT4-fs (loop1): Remounting filesystem read-only [ 69.101489][ T5539] EXT4-fs (loop1): 1 truncate cleaned up [ 69.107784][ T5570] netlink: 168 bytes leftover after parsing attributes in process `syz.2.514'. [ 69.173363][ T5570] can0 (unregistered): slcan off ttyS3. [ 69.201108][ T5565] can0: slcan on ttyS3. [ 69.303401][ T5565] can0 (unregistered): slcan off ttyS3. [ 69.341199][ T5603] loop4: detected capacity change from 0 to 1024 [ 69.557120][ T5633] SELinux: failed to load policy [ 69.641484][ T5639] loop1: detected capacity change from 0 to 1024 [ 69.889702][ T5662] can0: slcan on ttyS3. [ 69.943379][ T5662] can0 (unregistered): slcan off ttyS3. [ 69.969706][ T5662] can0: slcan on ttyS3. [ 69.982513][ T5662] loop1: detected capacity change from 0 to 512 [ 70.002682][ T5662] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.037091][ T5662] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 70.051051][ T5662] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 70.066442][ T5662] System zones: 1-12 [ 70.070624][ T5662] EXT4-fs (loop1): orphan cleanup on readonly fs [ 70.084456][ T5662] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.543: bg 0: block 361: padding at end of block bitmap is not set [ 70.099467][ T5662] EXT4-fs (loop1): Remounting filesystem read-only [ 70.106825][ T5662] EXT4-fs (loop1): 1 truncate cleaned up [ 70.213642][ T5701] SELinux: failed to load policy [ 70.373711][ T5688] can0 (unregistered): slcan off ttyS3. [ 70.530477][ T5734] loop3: detected capacity change from 0 to 1024 [ 70.607189][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 70.607205][ T29] audit: type=1400 audit(1757022257.568:3058): avc: denied { create } for pid=5750 comm="syz.1.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.648329][ T5734] EXT4-fs mount: 8 callbacks suppressed [ 70.648349][ T5734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.656802][ T29] audit: type=1400 audit(1757022257.568:3059): avc: denied { write } for pid=5750 comm="syz.1.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.688993][ T29] audit: type=1400 audit(1757022257.638:3060): avc: denied { watch watch_reads } for pid=5759 comm="syz.1.559" path="/122" dev="tmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.711953][ T29] audit: type=1400 audit(1757022257.658:3061): avc: denied { add_name } for pid=5733 comm="syz.3.555" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.732653][ T29] audit: type=1400 audit(1757022257.658:3062): avc: denied { create } for pid=5733 comm="syz.3.555" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 70.753030][ T29] audit: type=1400 audit(1757022257.658:3063): avc: denied { read write } for pid=5733 comm="syz.3.555" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.775602][ T29] audit: type=1400 audit(1757022257.658:3064): avc: denied { open } for pid=5733 comm="syz.3.555" path="/101/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.816378][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.858780][ T5772] loop3: detected capacity change from 0 to 512 [ 70.906707][ T5772] EXT4-fs: Ignoring removed nobh option [ 70.985279][ T5772] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.560: corrupted inode contents [ 71.007462][ T29] audit: type=1400 audit(1757022257.878:3065): avc: denied { execmem } for pid=5780 comm="syz.2.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 71.028566][ T5772] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.560: mark_inode_dirty error [ 71.065489][ T5772] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.560: corrupted inode contents [ 71.092824][ T5772] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.560: mark_inode_dirty error [ 71.230892][ T5791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'. [ 71.239917][ T5791] IPVS: Error joining to the multicast group [ 71.294763][ T5772] Quota error (device loop3): write_blk: dquota write failed [ 71.326650][ T5772] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 71.409451][ T5772] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.560: Failed to acquire dquot type 0 [ 71.477744][ T5772] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.560: corrupted inode contents [ 71.538615][ T5772] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.560: mark_inode_dirty error [ 71.566532][ T5772] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.560: corrupted inode contents [ 71.593361][ T5772] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.560: mark_inode_dirty error [ 71.605702][ T5796] netlink: 168 bytes leftover after parsing attributes in process `syz.4.567'. [ 71.618012][ T5796] can0: slcan on ttyS3. [ 71.638992][ T5772] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.560: corrupted inode contents [ 71.667689][ T5772] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 71.676303][ T5796] can0 (unregistered): slcan off ttyS3. [ 71.685062][ T5798] can0: slcan on ttyS3. [ 71.717688][ T5772] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.560: corrupted inode contents [ 71.739987][ T5772] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.560: mark_inode_dirty error [ 71.752635][ T5772] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 71.762336][ T5796] can0 (unregistered): slcan off ttyS3. [ 71.769775][ T5772] EXT4-fs (loop3): 1 truncate cleaned up [ 71.776256][ T5772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.790065][ T5772] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.801667][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.837682][ T5772] syz.3.560 (5772) used greatest stack depth: 9760 bytes left [ 71.845499][ T5803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.880372][ T5812] loop0: detected capacity change from 0 to 512 [ 71.888036][ T5812] EXT4-fs: Ignoring removed nobh option [ 71.894935][ T5803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.906604][ T5816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.574'. [ 71.915527][ T5812] EXT4-fs (loop0): failed to initialize system zone (-117) [ 71.922798][ T5812] EXT4-fs (loop0): mount failed [ 71.931172][ T5816] ip6gre3: entered allmulticast mode [ 71.942964][ T5803] validate_nla: 5 callbacks suppressed [ 71.942979][ T5803] netlink: 'syz.4.570': attribute type 13 has an invalid length. [ 71.948799][ T5814] loop2: detected capacity change from 0 to 512 [ 71.956304][ T5803] netlink: 'syz.4.570': attribute type 17 has an invalid length. [ 71.977889][ T5814] EXT4-fs: Ignoring removed nobh option [ 72.003908][ T5814] EXT4-fs (loop2): failed to initialize system zone (-117) [ 72.011160][ T5814] EXT4-fs (loop2): mount failed [ 72.017528][ T5803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 72.025384][ T5819] netlink: 'syz.4.570': attribute type 2 has an invalid length. [ 72.055697][ T5821] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 72.077306][ T5821] SELinux: failed to load policy [ 72.083972][ T5814] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 72.095157][ T5822] loop3: detected capacity change from 0 to 512 [ 72.104081][ T5822] EXT4-fs: Ignoring removed nobh option [ 72.110402][ T5814] SELinux: failed to load policy [ 72.117495][ T5822] EXT4-fs (loop3): failed to initialize system zone (-117) [ 72.154621][ T5822] EXT4-fs (loop3): mount failed [ 72.189850][ T5827] loop0: detected capacity change from 0 to 512 [ 72.203920][ T5829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.578'. [ 72.220737][ T5827] EXT4-fs: Ignoring removed nobh option [ 72.232151][ T5822] SELinux: failed to load policy [ 72.233350][ T5829] IPVS: Error joining to the multicast group [ 72.271920][ T5827] EXT4-fs (loop0): failed to initialize system zone (-117) [ 72.281660][ T5829] loop2: detected capacity change from 0 to 2364 [ 72.289772][ T5827] EXT4-fs (loop0): mount failed [ 72.312651][ T5829] iso9660: Unknown parameter '0x000000000000002a0x0000000000000000' [ 72.362806][ T5827] SELinux: failed to load policy [ 72.402915][ T5838] loop3: detected capacity change from 0 to 1024 [ 72.416263][ T5837] netlink: 168 bytes leftover after parsing attributes in process `syz.2.581'. [ 72.438182][ T5838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.454870][ T5837] can0: slcan on ttyS3. [ 72.479869][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.503223][ T5837] can0 (unregistered): slcan off ttyS3. [ 72.512531][ T5837] can0: slcan on ttyS3. [ 72.602003][ T5854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 72.611008][ T5837] can0 (unregistered): slcan off ttyS3. [ 72.631379][ T5854] ip6gre2: entered allmulticast mode [ 72.668950][ T5865] loop3: detected capacity change from 0 to 1024 [ 72.697246][ T5859] loop2: detected capacity change from 0 to 512 [ 72.726683][ T5859] EXT4-fs: Ignoring removed nobh option [ 72.743390][ T5865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.758596][ T5869] loop0: detected capacity change from 0 to 1024 [ 72.815024][ T5869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.835416][ T5859] EXT4-fs (loop2): failed to initialize system zone (-117) [ 72.842672][ T5859] EXT4-fs (loop2): mount failed [ 72.873964][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.896051][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.950776][ T5859] SELinux: failed to load policy [ 72.993233][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'. [ 73.026864][ T5895] IPVS: Error joining to the multicast group [ 73.064063][ T5895] loop0: detected capacity change from 0 to 2364 [ 73.090927][ T5895] iso9660: Unknown parameter '0x000000000000002a0x0000000000000000' [ 73.108377][ T5905] loop3: detected capacity change from 0 to 1024 [ 73.130212][ T5907] loop2: detected capacity change from 0 to 512 [ 73.148756][ T5907] EXT4-fs: Ignoring removed nobh option [ 73.165653][ T5905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.178329][ T5907] EXT4-fs (loop2): failed to initialize system zone (-117) [ 73.193151][ T5907] EXT4-fs (loop2): mount failed [ 73.239316][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.250117][ T5912] netlink: 68 bytes leftover after parsing attributes in process `syz.0.596'. [ 73.266908][ T5907] SELinux: failed to load policy [ 73.422120][ T5920] can0: slcan on ttyS3. [ 73.428604][ T5926] loop3: detected capacity change from 0 to 1024 [ 73.469884][ T5926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.483477][ T5920] can0 (unregistered): slcan off ttyS3. [ 73.503453][ T5920] can0: slcan on ttyS3. [ 73.520236][ T5920] loop0: detected capacity change from 0 to 512 [ 73.534897][ T5920] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.603512][ T5920] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 73.625299][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.636398][ T5920] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 73.655127][ T5920] System zones: 1-12 [ 73.659714][ T5920] EXT4-fs (loop0): orphan cleanup on readonly fs [ 73.977749][ T5920] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.600: bg 0: block 361: padding at end of block bitmap is not set [ 74.049206][ T5920] EXT4-fs (loop0): Remounting filesystem read-only [ 74.060727][ T5920] EXT4-fs (loop0): 1 truncate cleaned up [ 74.070699][ T5920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 74.108829][ T5948] loop4: detected capacity change from 0 to 1024 [ 74.125203][ T5948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.163286][ T5920] can0 (unregistered): slcan off ttyS3. [ 74.177572][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 74.213385][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.355992][ T5976] SELinux: failed to load policy [ 74.479265][ T5997] loop3: detected capacity change from 0 to 1024 [ 74.497996][ T5999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.528181][ T5997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.548075][ T5999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.567925][ T5999] netlink: 'syz.4.617': attribute type 13 has an invalid length. [ 74.575804][ T5999] netlink: 'syz.4.617': attribute type 17 has an invalid length. [ 74.587486][ T6012] can0: slcan on ttyS3. [ 74.643388][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.690372][ T6018] netlink: 'syz.4.617': attribute type 2 has an invalid length. [ 74.698213][ T6004] can0 (unregistered): slcan off ttyS3. [ 74.730531][ T6012] can0: slcan on ttyS3. [ 74.745831][ T6020] netlink: 16 bytes leftover after parsing attributes in process `syz.3.620'. [ 74.760535][ T5999] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 74.778850][ T6004] loop2: detected capacity change from 0 to 512 [ 74.797677][ T6020] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.813123][ T6004] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.839896][ T6004] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 74.867625][ T6004] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 74.883036][ T6004] System zones: 1-12 [ 74.887184][ T6004] EXT4-fs (loop2): orphan cleanup on readonly fs [ 74.899438][ T6020] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.910221][ T6004] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.618: bg 0: block 361: padding at end of block bitmap is not set [ 74.943018][ T6004] EXT4-fs (loop2): Remounting filesystem read-only [ 74.958135][ T6020] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.969021][ T6004] EXT4-fs (loop2): 1 truncate cleaned up [ 74.996767][ T6004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 75.037336][ T6020] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.101044][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 75.134680][ T59] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.162856][ T59] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.176900][ T59] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.196297][ T59] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.365103][ T6055] loop2: detected capacity change from 0 to 512 [ 75.379406][ T6055] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.628: Parent and EA inode have the same ino 15 [ 75.392104][ T6039] can0 (unregistered): slcan off ttyS3. [ 75.403118][ T6055] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 75.417577][ T6055] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.628: Parent and EA inode have the same ino 15 [ 75.430201][ T6055] EXT4-fs (loop2): 1 orphan inode deleted [ 75.437738][ T6055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.492291][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.526774][ T6061] loop4: detected capacity change from 0 to 1024 [ 75.546663][ T6061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.578041][ T6076] loop0: detected capacity change from 0 to 1024 [ 75.587676][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.607265][ T6075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.641084][ T6076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.655564][ T6075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.694358][ T6075] netlink: 'syz.2.631': attribute type 13 has an invalid length. [ 75.702198][ T6075] netlink: 'syz.2.631': attribute type 17 has an invalid length. [ 75.754633][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.765256][ T6101] netlink: 'syz.2.631': attribute type 2 has an invalid length. [ 75.812326][ T6075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.888666][ T6108] can0: slcan on ttyS3. [ 75.920016][ T6110] loop4: detected capacity change from 0 to 1024 [ 75.947024][ T6110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.965644][ T6108] can0 (unregistered): slcan off ttyS3. [ 75.988651][ T6118] can0: slcan on ttyS3. [ 76.000519][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.009773][ T6108] loop0: detected capacity change from 0 to 512 [ 76.020527][ T6108] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.032811][ T6108] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 76.069210][ T6108] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 76.077571][ T6108] System zones: 1-12 [ 76.081669][ T6108] EXT4-fs (loop0): orphan cleanup on readonly fs [ 76.088673][ T6108] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.633: bg 0: block 361: padding at end of block bitmap is not set [ 76.125928][ T6108] EXT4-fs (loop0): Remounting filesystem read-only [ 76.132566][ T6108] EXT4-fs (loop0): 1 truncate cleaned up [ 76.140178][ T6108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 76.203414][ T6108] can0 (unregistered): slcan off ttyS3. [ 76.210351][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 76.223945][ T6135] loop4: detected capacity change from 0 to 512 [ 76.235048][ T6136] loop3: detected capacity change from 0 to 1024 [ 76.242312][ T6135] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.275482][ T6136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.302955][ T6135] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.326269][ T6135] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.334821][ T6135] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.366324][ T6135] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.639: Allocating blocks 41-42 which overlap fs metadata [ 76.408853][ T6135] __quota_error: 395 callbacks suppressed [ 76.408965][ T6135] Quota error (device loop4): write_blk: dquota write failed [ 76.422384][ T6135] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 76.425752][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.432710][ T6135] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.639: Allocating blocks 41-42 which overlap fs metadata [ 76.463519][ T6135] Quota error (device loop4): write_blk: dquota write failed [ 76.476757][ T6135] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 76.493835][ T6135] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.639: Failed to acquire dquot type 1 [ 76.537803][ T6135] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 76.563870][ T6135] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.639: corrupted inode contents [ 76.589671][ T6167] loop3: detected capacity change from 0 to 1024 [ 76.606495][ T6167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.613160][ T6135] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #12: comm syz.4.639: mark_inode_dirty error [ 76.636543][ T6135] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.639: corrupted inode contents [ 76.649481][ T6135] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.639: mark_inode_dirty error [ 76.662083][ T29] audit: type=1400 audit(1757022263.618:3459): avc: denied { write } for pid=6170 comm="syz.0.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.662199][ T6135] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.639: corrupted inode contents [ 76.694671][ T6135] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 76.703688][ T6135] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.639: corrupted inode contents [ 76.733280][ T6135] EXT4-fs error (device loop4): ext4_truncate:4666: inode #12: comm syz.4.639: mark_inode_dirty error [ 76.734704][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.755643][ T6135] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 76.773326][ T6135] EXT4-fs (loop4): 1 truncate cleaned up [ 76.779481][ T6135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.943345][ T29] audit: type=1400 audit(1757022263.908:3460): avc: denied { prog_load } for pid=6173 comm="syz.3.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 76.983547][ T29] audit: type=1400 audit(1757022263.908:3461): avc: denied { bpf } for pid=6173 comm="syz.3.645" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.004116][ T29] audit: type=1400 audit(1757022263.908:3462): avc: denied { perfmon } for pid=6173 comm="syz.3.645" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.025072][ T29] audit: type=1400 audit(1757022263.928:3463): avc: denied { open } for pid=6173 comm="syz.3.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 77.044395][ T29] audit: type=1400 audit(1757022263.928:3464): avc: denied { kernel } for pid=6173 comm="syz.3.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 77.173337][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.375581][ T6187] FAULT_INJECTION: forcing a failure. [ 77.375581][ T6187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.388785][ T6187] CPU: 0 UID: 0 PID: 6187 Comm: syz.3.651 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.388891][ T6187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 77.388950][ T6187] Call Trace: [ 77.388957][ T6187] [ 77.388966][ T6187] __dump_stack+0x1d/0x30 [ 77.388992][ T6187] dump_stack_lvl+0xe8/0x140 [ 77.389017][ T6187] dump_stack+0x15/0x1b [ 77.389032][ T6187] should_fail_ex+0x265/0x280 [ 77.389052][ T6187] should_fail+0xb/0x20 [ 77.389099][ T6187] should_fail_usercopy+0x1a/0x20 [ 77.389129][ T6187] _copy_from_user+0x1c/0xb0 [ 77.389208][ T6187] btf_new_fd+0x20a/0x790 [ 77.389234][ T6187] bpf_btf_load+0x112/0x130 [ 77.389263][ T6187] __sys_bpf+0x352/0x7b0 [ 77.389295][ T6187] __x64_sys_bpf+0x41/0x50 [ 77.389329][ T6187] x64_sys_call+0x2aea/0x2ff0 [ 77.389357][ T6187] do_syscall_64+0xd2/0x200 [ 77.389432][ T6187] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 77.389531][ T6187] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 77.389597][ T6187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.389651][ T6187] RIP: 0033:0x7f608082ebe9 [ 77.389669][ T6187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.389692][ T6187] RSP: 002b:00007f607f297038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 77.389713][ T6187] RAX: ffffffffffffffda RBX: 00007f6080a65fa0 RCX: 00007f608082ebe9 [ 77.389725][ T6187] RDX: 0000000000000028 RSI: 0000200000000800 RDI: 0000000000000012 [ 77.389741][ T6187] RBP: 00007f607f297090 R08: 0000000000000000 R09: 0000000000000000 [ 77.389757][ T6187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.389768][ T6187] R13: 00007f6080a66038 R14: 00007f6080a65fa0 R15: 00007ffc3186ef98 [ 77.389816][ T6187] [ 77.648190][ T6190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.666036][ T6190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.679214][ T6195] loop0: detected capacity change from 0 to 512 [ 77.686664][ T6195] EXT4-fs: Ignoring removed nobh option [ 77.698908][ T6195] EXT4-fs (loop0): failed to initialize system zone (-117) [ 77.708589][ T6195] EXT4-fs (loop0): mount failed [ 77.713919][ T6190] netlink: 'syz.3.652': attribute type 13 has an invalid length. [ 77.721670][ T6190] netlink: 'syz.3.652': attribute type 17 has an invalid length. [ 77.770048][ T6199] netlink: 'syz.3.652': attribute type 2 has an invalid length. [ 77.786014][ T6190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 77.882746][ T6201] SELinux: failed to load policy [ 78.274230][ T6210] tipc: Started in network mode [ 78.279241][ T6210] tipc: Node identity d6fe5289b87d, cluster identity 4711 [ 78.286520][ T6210] tipc: Enabled bearer , priority 0 [ 78.315908][ T6209] tipc: Resetting bearer [ 78.330975][ T6209] tipc: Disabling bearer [ 78.504880][ T6221] loop2: detected capacity change from 0 to 1024 [ 78.556521][ T6221] EXT4-fs: Ignoring removed orlov option [ 78.562440][ T6221] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.590340][ T6226] loop3: detected capacity change from 0 to 512 [ 78.618041][ T6226] EXT4-fs: Ignoring removed nobh option [ 78.636289][ T6221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.656361][ T6226] EXT4-fs (loop3): failed to initialize system zone (-117) [ 78.673179][ T6226] EXT4-fs (loop3): mount failed [ 78.858323][ T6226] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 78.948109][ T6226] SELinux: failed to load policy [ 79.048437][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.138582][ T6243] syz.3.669 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 79.155444][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'. [ 79.167446][ T6244] ip6gre3: entered allmulticast mode [ 79.224152][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.671'. [ 79.243393][ T6248] ip6gre4: entered allmulticast mode [ 79.581685][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.678'. [ 79.599601][ T6261] loop2: detected capacity change from 0 to 1024 [ 79.641619][ T6259] tipc: Enabling of bearer rejected, failed to enable media [ 79.652391][ T6261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.778900][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.880804][ T6273] loop4: detected capacity change from 0 to 1024 [ 79.887563][ T6273] EXT4-fs: Ignoring removed orlov option [ 79.893460][ T6273] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.902756][ T6273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.057770][ T6292] can0: slcan on ttyS3. [ 80.103814][ T6292] can0 (unregistered): slcan off ttyS3. [ 80.112547][ T6292] can0: slcan on ttyS3. [ 80.129952][ T6292] loop0: detected capacity change from 0 to 512 [ 80.147184][ T6292] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.215999][ T6292] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 80.268985][ T6292] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 80.283300][ T6292] System zones: 1-12 [ 80.325346][ T6292] EXT4-fs (loop0): orphan cleanup on readonly fs [ 80.357638][ T6305] loop2: detected capacity change from 0 to 1024 [ 80.384565][ T6292] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.685: bg 0: block 361: padding at end of block bitmap is not set [ 80.457693][ T6305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.466073][ T6292] EXT4-fs (loop0): Remounting filesystem read-only [ 80.493771][ T6292] EXT4-fs (loop0): 1 truncate cleaned up [ 80.500492][ T6292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 80.614793][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.633671][ T6292] can0 (unregistered): slcan off ttyS3. [ 80.652573][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 80.718278][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.798417][ T6328] loop0: detected capacity change from 0 to 2364 [ 80.799986][ T6326] loop3: detected capacity change from 0 to 1024 [ 80.829324][ T6328] iso9660: Unknown parameter '0x000000000000002a0x0000000000000000' [ 80.853711][ T6326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.874836][ T6338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.902388][ T6338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.934466][ T6338] netlink: 'syz.4.695': attribute type 13 has an invalid length. [ 80.942366][ T6338] netlink: 'syz.4.695': attribute type 17 has an invalid length. [ 80.963924][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.980331][ T6350] loop0: detected capacity change from 0 to 512 [ 80.994677][ T6350] EXT4-fs: Ignoring removed nobh option [ 81.006011][ T6338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.011571][ T6355] netlink: 'syz.4.695': attribute type 2 has an invalid length. [ 81.092039][ T6350] EXT4-fs (loop0): failed to initialize system zone (-117) [ 81.113118][ T6350] EXT4-fs (loop0): mount failed [ 81.126129][ T6366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.700'. [ 81.157667][ T6367] can0: slcan on ttyS3. [ 81.190144][ T6369] loop3: detected capacity change from 0 to 512 [ 81.197707][ T6369] EXT4-fs: Ignoring removed nobh option [ 81.207958][ T6369] EXT4-fs (loop3): failed to initialize system zone (-117) [ 81.230574][ T6369] EXT4-fs (loop3): mount failed [ 81.243310][ T6367] can0 (unregistered): slcan off ttyS3. [ 81.267362][ T6372] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 81.280740][ T6372] SELinux: failed to load policy [ 81.294067][ T6373] loop2: detected capacity change from 0 to 512 [ 81.306154][ T6364] can0: slcan on ttyS3. [ 81.312265][ T6369] SELinux: failed to load policy [ 81.314409][ T6373] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.355094][ T6373] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 81.372447][ T6373] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 81.383607][ T6373] System zones: 1-12 [ 81.387711][ T6373] EXT4-fs (loop2): orphan cleanup on readonly fs [ 81.396483][ T6373] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.699: bg 0: block 361: padding at end of block bitmap is not set [ 81.418612][ T6380] loop3: detected capacity change from 0 to 1024 [ 81.449634][ T6373] EXT4-fs (loop2): Remounting filesystem read-only [ 81.475932][ T6373] EXT4-fs (loop2): 1 truncate cleaned up [ 81.483895][ T6373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 81.510825][ T6380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.559888][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.593105][ T6364] can0 (unregistered): slcan off ttyS3. [ 81.610187][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 81.633846][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 81.633862][ T29] audit: type=1326 audit(1757022268.598:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.3.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608082ebe9 code=0x7ffc0000 [ 81.734537][ T29] audit: type=1326 audit(1757022268.648:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.3.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f608082ebe9 code=0x7ffc0000 [ 81.757979][ T29] audit: type=1326 audit(1757022268.648:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.3.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608082ebe9 code=0x7ffc0000 [ 81.781324][ T29] audit: type=1326 audit(1757022268.648:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.3.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608082ebe9 code=0x7ffc0000 [ 81.804950][ T29] audit: type=1326 audit(1757022268.648:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.3.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f608082ebe9 code=0x7ffc0000 [ 81.828469][ T29] audit: type=1326 audit(1757022268.648:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.3.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608082ebe9 code=0x7ffc0000 [ 81.852049][ T29] audit: type=1326 audit(1757022268.648:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.3.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608082ebe9 code=0x7ffc0000 [ 81.875442][ T29] audit: type=1326 audit(1757022268.648:3789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.3.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f608082ebe9 code=0x7ffc0000 [ 81.898980][ T29] audit: type=1326 audit(1757022268.648:3790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.3.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608082ebe9 code=0x7ffc0000 [ 81.922325][ T29] audit: type=1326 audit(1757022268.648:3791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.3.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f608082ebe9 code=0x7ffc0000 [ 81.930593][ T6419] loop2: detected capacity change from 0 to 1024 [ 81.974985][ T6410] loop3: detected capacity change from 0 to 512 [ 82.016133][ T6410] EXT4-fs: Ignoring removed nobh option [ 82.023676][ T6419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.057211][ T6410] EXT4-fs (loop3): failed to initialize system zone (-117) [ 82.072875][ T6410] EXT4-fs (loop3): mount failed [ 82.114889][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.257551][ T6448] can0: slcan on ttyS3. [ 82.323299][ T6448] can0 (unregistered): slcan off ttyS3. [ 82.331493][ T6458] can0: slcan on ttyS3. [ 82.342397][ T6448] loop2: detected capacity change from 0 to 512 [ 82.351738][ T6448] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.361553][ T6448] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 82.375330][ T6448] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 82.383534][ T6448] System zones: 1-12 [ 82.387689][ T6448] EXT4-fs (loop2): orphan cleanup on readonly fs [ 82.396906][ T6448] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.711: bg 0: block 361: padding at end of block bitmap is not set [ 82.411904][ T6448] EXT4-fs (loop2): Remounting filesystem read-only [ 82.421531][ T6448] EXT4-fs (loop2): 1 truncate cleaned up [ 82.427793][ T6448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 82.484952][ T6473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.495347][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 82.508817][ T6473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.533919][ T6453] can0 (unregistered): slcan off ttyS3. [ 82.543924][ T6473] netlink: 'syz.0.717': attribute type 13 has an invalid length. [ 82.551847][ T6473] netlink: 'syz.0.717': attribute type 17 has an invalid length. [ 82.603284][ T6485] netlink: 'syz.0.717': attribute type 2 has an invalid length. [ 82.659081][ T6473] 0ªX¹¦D: left allmulticast mode [ 82.675185][ T6488] loop3: detected capacity change from 0 to 2364 [ 82.686308][ T6488] iso9660: Unknown parameter '0x000000000000002a0x0000000000000000' [ 82.704363][ T6473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.857974][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.719'. [ 82.867261][ T6494] IPVS: Error joining to the multicast group [ 83.151521][ T6501] loop3: detected capacity change from 0 to 1024 [ 83.183958][ T6501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.227354][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.271362][ T6519] loop3: detected capacity change from 0 to 512 [ 83.278156][ T6519] EXT4-fs: Ignoring removed nobh option [ 83.287362][ T6519] EXT4-fs (loop3): failed to initialize system zone (-117) [ 83.295282][ T6519] EXT4-fs (loop3): mount failed [ 83.342349][ T6516] loop2: detected capacity change from 0 to 1024 [ 83.356637][ T6516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.367363][ T6519] SELinux: failed to load policy [ 83.392623][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.489704][ T6528] can0: slcan on ttyS3. [ 83.533335][ T6528] can0 (unregistered): slcan off ttyS3. [ 83.541858][ T6528] can0: slcan on ttyS3. [ 83.553820][ T6528] loop4: detected capacity change from 0 to 512 [ 83.563647][ T6528] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.585166][ T6528] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 83.607486][ T6528] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 83.615619][ T6528] System zones: 1-12 [ 83.619733][ T6528] EXT4-fs (loop4): orphan cleanup on readonly fs [ 83.629281][ T6528] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.728: bg 0: block 361: padding at end of block bitmap is not set [ 83.746170][ T6552] loop1: detected capacity change from 0 to 512 [ 83.755678][ T6552] EXT4-fs: Ignoring removed nobh option [ 83.777860][ T6528] EXT4-fs (loop4): Remounting filesystem read-only [ 83.803737][ T6528] EXT4-fs (loop4): 1 truncate cleaned up [ 83.809945][ T6528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 83.832045][ T6552] EXT4-fs (loop1): failed to initialize system zone (-117) [ 83.854310][ T6552] EXT4-fs (loop1): mount failed [ 83.860998][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 84.021611][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 84.022294][ T6577] SELinux: failed to load policy [ 84.039408][ T6579] ip6gre3: entered allmulticast mode [ 84.071624][ T6581] loop3: detected capacity change from 0 to 512 [ 84.078591][ T6581] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.086857][ T6581] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.097335][ T6581] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.105913][ T6581] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.143654][ T6581] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.743: Allocating blocks 41-42 which overlap fs metadata [ 84.159148][ T6581] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.743: Allocating blocks 41-42 which overlap fs metadata [ 84.173144][ T6557] can0 (unregistered): slcan off ttyS3. [ 84.227461][ T6581] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.743: Failed to acquire dquot type 1 [ 84.303366][ T6581] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 84.331527][ T6581] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.743: corrupted inode contents [ 84.355446][ T6581] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #12: comm syz.3.743: mark_inode_dirty error [ 84.385830][ T6581] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.743: corrupted inode contents [ 84.398060][ T6581] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.743: mark_inode_dirty error [ 84.411435][ T6581] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.743: corrupted inode contents [ 84.416408][ T6611] loop1: detected capacity change from 0 to 2364 [ 84.441497][ T6581] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 84.447628][ T6611] iso9660: Unknown parameter '0x000000000000002a0x0000000000000000' [ 84.497742][ T6620] loop4: detected capacity change from 0 to 1024 [ 84.518951][ T6581] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.743: corrupted inode contents [ 84.566486][ T6581] EXT4-fs error (device loop3): ext4_truncate:4666: inode #12: comm syz.3.743: mark_inode_dirty error [ 84.636724][ T6581] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 84.684861][ T6581] EXT4-fs (loop3): 1 truncate cleaned up [ 84.717870][ T6642] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 84.737503][ T6642] SELinux: failed to load policy [ 84.831985][ T6653] tipc: Started in network mode [ 84.836978][ T6653] tipc: Node identity 52674c2bcefb, cluster identity 4711 [ 84.844405][ T6653] tipc: Enabled bearer , priority 0 [ 84.853038][ T6648] tipc: Resetting bearer [ 84.867622][ T6655] loop0: detected capacity change from 0 to 1024 [ 84.890262][ T6648] tipc: Disabling bearer [ 85.046237][ T6646] loop2: detected capacity change from 0 to 1024 [ 85.053284][ T6646] EXT4-fs: Ignoring removed orlov option [ 85.059019][ T6646] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.088901][ T6668] loop4: detected capacity change from 0 to 1024 [ 85.131562][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.768'. [ 85.185853][ T6684] loop1: detected capacity change from 0 to 512 [ 85.207188][ T6684] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.221806][ T6665] can0: slcan on ttyS3. [ 85.242657][ T6684] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 85.273567][ T6676] can0 (unregistered): slcan off ttyS3. [ 85.275984][ T6684] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 85.289211][ T6684] System zones: 1-12 [ 85.290876][ T6681] can0: slcan on ttyS3. [ 85.293394][ T6684] EXT4-fs (loop1): orphan cleanup on readonly fs [ 85.305333][ T6684] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.765: bg 0: block 361: padding at end of block bitmap is not set [ 85.319740][ T6684] EXT4-fs (loop1): Remounting filesystem read-only [ 85.327441][ T6684] EXT4-fs (loop1): 1 truncate cleaned up [ 85.357092][ T6691] loop0: detected capacity change from 0 to 512 [ 85.365553][ T6691] EXT4-fs: Ignoring removed nobh option [ 85.426215][ T6691] EXT4-fs (loop0): failed to initialize system zone (-117) [ 85.479359][ T6691] EXT4-fs (loop0): mount failed [ 85.640675][ T6718] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 85.662633][ T6723] loop1: detected capacity change from 0 to 1024 [ 85.673377][ T6718] SELinux: failed to load policy [ 85.692838][ T6725] loop3: detected capacity change from 0 to 1024 [ 85.699511][ T6644] can0 (unregistered): slcan off ttyS3. [ 85.807153][ T6738] loop3: detected capacity change from 0 to 512 [ 85.821047][ T6738] EXT4-fs: Ignoring removed nobh option [ 85.840441][ T6738] EXT4-fs (loop3): failed to initialize system zone (-117) [ 85.859969][ T6738] EXT4-fs (loop3): mount failed [ 85.999114][ T6738] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 86.009483][ T6738] SELinux: failed to load policy [ 86.218732][ T6760] loop1: detected capacity change from 0 to 2364 [ 86.225888][ T6760] iso9660: Unknown parameter '0xffffffffffffffff0x0000000000000000' [ 86.643570][ T6764] can0: slcan on ttyS3. [ 86.650977][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 86.651000][ T29] audit: type=1400 audit(1757022273.608:4171): avc: denied { setopt } for pid=6766 comm="syz.4.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.676865][ T29] audit: type=1400 audit(1757022273.608:4172): avc: denied { connect } for pid=6766 comm="syz.4.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.773972][ T29] audit: type=1400 audit(1757022273.728:4173): avc: denied { create } for pid=6771 comm="syz.4.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 86.793622][ T29] audit: type=1400 audit(1757022273.728:4174): avc: denied { connect } for pid=6771 comm="syz.4.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 86.795110][ T6764] can0 (unregistered): slcan off ttyS3. [ 86.829066][ T6770] loop0: detected capacity change from 0 to 2364 [ 86.843593][ T6770] iso9660: Unknown parameter '0x000000000000002a0x0000000000000000' [ 86.860551][ T6765] can0: slcan on ttyS3. [ 86.880987][ T6764] loop3: detected capacity change from 0 to 512 [ 86.917717][ T29] audit: type=1400 audit(1757022273.868:4175): avc: denied { create } for pid=6784 comm="syz.2.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.949324][ T6764] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.982200][ T6764] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 87.005770][ T6764] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 87.015256][ T29] audit: type=1400 audit(1757022273.908:4176): avc: denied { read write } for pid=6768 comm="syz.0.788" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.035348][ T6764] System zones: 1-12 [ 87.039277][ T29] audit: type=1400 audit(1757022273.908:4177): avc: denied { open } for pid=6768 comm="syz.0.788" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.067245][ T29] audit: type=1400 audit(1757022273.908:4178): avc: denied { ioctl } for pid=6768 comm="syz.0.788" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.092708][ T29] audit: type=1400 audit(1757022273.908:4179): avc: denied { prog_load } for pid=6784 comm="syz.2.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 87.111776][ T29] audit: type=1400 audit(1757022273.908:4180): avc: denied { bpf } for pid=6784 comm="syz.2.791" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.143754][ T6764] EXT4-fs (loop3): orphan cleanup on readonly fs [ 87.186343][ T6764] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.786: bg 0: block 361: padding at end of block bitmap is not set [ 87.249864][ T6764] EXT4-fs (loop3): Remounting filesystem read-only [ 87.257606][ T6816] tipc: Enabled bearer , priority 0 [ 87.265849][ T6764] EXT4-fs (loop3): 1 truncate cleaned up [ 87.272113][ T6815] tipc: Resetting bearer [ 87.316497][ T6815] tipc: Disabling bearer [ 87.331807][ T6828] loop0: detected capacity change from 0 to 1024 [ 87.413238][ T6764] can0 (unregistered): slcan off ttyS3. [ 87.487524][ T6845] loop2: detected capacity change from 0 to 2364 [ 87.498483][ T6845] iso9660: Unknown parameter '0x000000000000002a0x0000000000000000' [ 87.651726][ T6853] loop1: detected capacity change from 0 to 512 [ 87.660743][ T6853] EXT4-fs: Ignoring removed nobh option [ 87.684502][ T6853] EXT4-fs (loop1): failed to initialize system zone (-117) [ 87.691890][ T6853] EXT4-fs (loop1): mount failed [ 87.739256][ T6851] loop2: detected capacity change from 0 to 1024 [ 87.807239][ T6865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.817189][ T6865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.824448][ T6867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.834425][ T6867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.842332][ T6871] SELinux: failed to load policy [ 87.848079][ T6867] netlink: 'syz.2.814': attribute type 13 has an invalid length. [ 87.855886][ T6867] netlink: 'syz.2.814': attribute type 17 has an invalid length. [ 87.872407][ T6865] netlink: 'syz.3.815': attribute type 13 has an invalid length. [ 87.880221][ T6865] netlink: 'syz.3.815': attribute type 17 has an invalid length. [ 87.888443][ T6867] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.909674][ T6867] netlink: 'syz.2.814': attribute type 2 has an invalid length. [ 87.917574][ T6865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.948064][ T6865] netlink: 'syz.3.815': attribute type 2 has an invalid length. [ 88.152715][ T6890] tipc: Enabling of bearer rejected, failed to enable media [ 88.191301][ T6896] loop4: detected capacity change from 0 to 512 [ 88.200210][ T6896] EXT4-fs: Ignoring removed nobh option [ 88.217008][ T6896] EXT4-fs (loop4): failed to initialize system zone (-117) [ 88.224727][ T6896] EXT4-fs (loop4): mount failed [ 88.253631][ T6896] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 88.265564][ T6896] SELinux: failed to load policy [ 88.268861][ T6903] loop0: detected capacity change from 0 to 1024 [ 88.387955][ T6911] can0: slcan on ttyS3. [ 88.423862][ T6911] can0 (unregistered): slcan off ttyS3. [ 88.432284][ T6911] can0: slcan on ttyS3. [ 88.441911][ T6911] loop4: detected capacity change from 0 to 512 [ 88.451300][ T6911] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.475409][ T6922] loop1: detected capacity change from 0 to 1024 [ 88.515469][ T6911] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 88.584461][ T6911] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 88.592569][ T6911] System zones: 1-12 [ 88.628222][ T6946] loop3: detected capacity change from 0 to 512 [ 88.649908][ T6946] EXT4-fs: Ignoring removed nobh option [ 88.666227][ T6911] EXT4-fs (loop4): orphan cleanup on readonly fs [ 88.703075][ T6911] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.829: bg 0: block 361: padding at end of block bitmap is not set [ 88.705601][ T6946] EXT4-fs (loop3): failed to initialize system zone (-117) [ 88.739622][ T6946] EXT4-fs (loop3): mount failed [ 88.805006][ T6911] EXT4-fs (loop4): Remounting filesystem read-only [ 88.818145][ T6941] loop2: detected capacity change from 0 to 1024 [ 88.827316][ T6911] EXT4-fs (loop4): 1 truncate cleaned up [ 88.828243][ T6946] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 88.885020][ T6946] SELinux: failed to load policy [ 88.918826][ T6911] can0 (unregistered): slcan off ttyS3. [ 89.109066][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.851'. [ 89.121152][ T6992] ip6gre5: entered allmulticast mode [ 89.169871][ T6994] loop2: detected capacity change from 0 to 2364 [ 89.181199][ T6998] loop0: detected capacity change from 0 to 512 [ 89.189442][ T6994] iso9660: Unknown parameter '0x000000000000002a0x0000000000000000' [ 89.189511][ T6998] EXT4-fs: Ignoring removed nobh option [ 89.284273][ T6998] EXT4-fs (loop0): failed to initialize system zone (-117) [ 89.292241][ T6998] EXT4-fs (loop0): mount failed [ 89.344433][ T7002] can0: slcan on ttyS3. [ 89.387813][ T7012] loop1: detected capacity change from 0 to 512 [ 89.412812][ T7012] EXT4-fs: Ignoring removed nobh option [ 89.423100][ T7002] can0 (unregistered): slcan off ttyS3. [ 89.454113][ T7007] can0: slcan on ttyS3. [ 89.464377][ T7002] loop2: detected capacity change from 0 to 512 [ 89.471211][ T7002] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.478778][ T7012] EXT4-fs (loop1): failed to initialize system zone (-117) [ 89.499136][ T7002] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 89.510994][ T7012] EXT4-fs (loop1): mount failed [ 89.519770][ T7018] SELinux: failed to load policy [ 89.553695][ T7023] loop4: detected capacity change from 0 to 1024 [ 89.562591][ T7002] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 89.594294][ T7023] EXT4-fs: Ignoring removed orlov option [ 89.600025][ T7023] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.613309][ T7002] System zones: 1-12 [ 89.623267][ T7002] EXT4-fs (loop2): orphan cleanup on readonly fs [ 89.637916][ T7002] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.856: bg 0: block 361: padding at end of block bitmap is not set [ 89.658325][ T7031] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 89.681425][ T7031] SELinux: failed to load policy [ 89.701249][ T7002] EXT4-fs (loop2): Remounting filesystem read-only [ 89.711917][ T7002] EXT4-fs (loop2): 1 truncate cleaned up [ 89.833672][ T7036] can0 (unregistered): slcan off ttyS3. [ 89.850411][ T7041] can0: slcan on ttyS3. [ 89.868004][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.863'. [ 89.897087][ T7052] ip6gre4: entered allmulticast mode [ 89.909670][ T7036] loop0: detected capacity change from 0 to 512 [ 89.933491][ T7036] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.956938][ T7036] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 89.977582][ T7036] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 90.007622][ T7036] System zones: 1-12 [ 90.007814][ T7063] loop3: detected capacity change from 0 to 512 [ 90.011760][ T7036] EXT4-fs (loop0): orphan cleanup on readonly fs [ 90.019367][ T7063] EXT4-fs: Ignoring removed nobh option [ 90.042549][ T7036] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.860: bg 0: block 361: padding at end of block bitmap is not set [ 90.060180][ T7063] EXT4-fs (loop3): failed to initialize system zone (-117) [ 90.067657][ T7063] EXT4-fs (loop3): mount failed [ 90.071855][ T7036] EXT4-fs (loop0): Remounting filesystem read-only [ 90.086336][ T7036] EXT4-fs (loop0): 1 truncate cleaned up [ 90.128654][ T7063] SELinux: failed to load policy [ 90.203146][ T7036] can0 (unregistered): slcan off ttyS3. [ 90.251460][ T7078] loop3: detected capacity change from 0 to 1024 [ 90.314896][ T7084] loop2: detected capacity change from 0 to 1024 [ 90.500009][ T7109] loop0: detected capacity change from 0 to 1024 [ 90.506656][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.875'. [ 90.545016][ T7111] ip6gre5: entered allmulticast mode [ 90.563926][ T7115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.572463][ T7115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.657367][ T7131] loop0: detected capacity change from 0 to 512 [ 90.669445][ T7115] netlink: 'syz.2.877': attribute type 13 has an invalid length. [ 90.677264][ T7115] netlink: 'syz.2.877': attribute type 17 has an invalid length. [ 90.729805][ T7131] EXT4-fs: Ignoring removed nobh option [ 90.749477][ T7143] netlink: 'syz.2.877': attribute type 2 has an invalid length. [ 90.765587][ T7115] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.790893][ T7131] EXT4-fs (loop0): failed to initialize system zone (-117) [ 90.798699][ T7145] loop3: detected capacity change from 0 to 1024 [ 90.805631][ T7131] EXT4-fs (loop0): mount failed [ 90.950488][ T7157] SELinux: failed to load policy [ 91.078035][ T7163] loop1: detected capacity change from 0 to 1024 [ 91.267015][ T7167] loop4: detected capacity change from 0 to 2364 [ 91.273914][ T7167] iso9660: Unknown parameter '0xffffffffffffffff0x0000000000000000' [ 91.319824][ T7170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'. [ 91.374615][ T7170] ip6gre6: entered allmulticast mode [ 91.470739][ T7173] loop0: detected capacity change from 0 to 512 [ 91.478300][ T7173] EXT4-fs: Ignoring removed nobh option [ 91.522042][ T7173] EXT4-fs (loop0): failed to initialize system zone (-117) [ 91.529444][ T7173] EXT4-fs (loop0): mount failed [ 91.635150][ T7183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.664660][ T7183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.685390][ T7183] netlink: 'syz.3.895': attribute type 13 has an invalid length. [ 91.707609][ T7183] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.846164][ T7203] can0: slcan on ttyS3. [ 91.861890][ T7200] loop1: detected capacity change from 0 to 1024 [ 91.877038][ T7205] loop4: detected capacity change from 0 to 2364 [ 91.883502][ T7203] can0 (unregistered): slcan off ttyS3. [ 91.889509][ T7205] iso9660: Unknown parameter '0x000000000000002a0x0000000000000000' [ 91.910319][ T7198] can0: slcan on ttyS3. [ 91.930854][ T7198] loop2: detected capacity change from 0 to 512 [ 91.957470][ T7198] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.979859][ T7198] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 91.990861][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 91.990879][ T29] audit: type=1400 audit(1757022278.948:4439): avc: denied { watch watch_reads } for pid=7211 comm="syz.4.904" path="/162" dev="tmpfs" ino=872 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 92.012128][ T7198] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 92.030341][ T7198] System zones: 1-12 [ 92.035432][ T7198] EXT4-fs (loop2): orphan cleanup on readonly fs [ 92.042968][ T7198] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.901: bg 0: block 361: padding at end of block bitmap is not set [ 92.067688][ T7198] EXT4-fs (loop2): Remounting filesystem read-only [ 92.085124][ T7198] EXT4-fs (loop2): 1 truncate cleaned up [ 92.148254][ T7223] netlink: 168 bytes leftover after parsing attributes in process `syz.1.905'. [ 92.223483][ T7223] can0 (unregistered): slcan off ttyS3. [ 92.232514][ T7234] can0: slcan on ttyS3. [ 92.277315][ T29] audit: type=1326 audit(1757022279.238:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a820ebe9 code=0x7ffc0000 [ 92.286476][ T7243] loop1: detected capacity change from 0 to 512 [ 92.300904][ T29] audit: type=1326 audit(1757022279.238:4441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a820ebe9 code=0x7ffc0000 [ 92.330653][ T29] audit: type=1326 audit(1757022279.238:4442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fd2a820ebe9 code=0x7ffc0000 [ 92.340934][ T7243] EXT4-fs: Ignoring removed nobh option [ 92.354146][ T29] audit: type=1326 audit(1757022279.238:4443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a820ebe9 code=0x7ffc0000 [ 92.383048][ T29] audit: type=1326 audit(1757022279.238:4444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd2a820ebe9 code=0x7ffc0000 [ 92.406514][ T29] audit: type=1326 audit(1757022279.238:4445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a820ebe9 code=0x7ffc0000 [ 92.430009][ T29] audit: type=1326 audit(1757022279.238:4446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd2a820ebe9 code=0x7ffc0000 [ 92.453451][ T29] audit: type=1326 audit(1757022279.238:4447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a820ebe9 code=0x7ffc0000 [ 92.476859][ T29] audit: type=1326 audit(1757022279.238:4448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a820ebe9 code=0x7ffc0000 [ 92.507718][ T7243] EXT4-fs (loop1): failed to initialize system zone (-117) [ 92.517438][ T7243] EXT4-fs (loop1): mount failed [ 92.534354][ T7245] can0 (unregistered): slcan off ttyS3. [ 92.579544][ T7234] can0: slcan on ttyS3. [ 92.653721][ T7257] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 92.673560][ T7234] can0 (unregistered): slcan off ttyS3. [ 92.703082][ T7257] SELinux: failed to load policy [ 92.856923][ T7266] netlink: 36 bytes leftover after parsing attributes in process `syz.2.914'. [ 92.884903][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.916'. [ 92.910840][ T7266] loop2: detected capacity change from 0 to 2364 [ 92.919768][ T7269] ip6gre7: entered allmulticast mode [ 92.954930][ T7266] iso9660: Unknown parameter '0x000000000000002a0x0000000000000000' [ 93.013154][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 93.024861][ T7275] ip6gre6: entered allmulticast mode [ 93.183902][ T7295] loop3: detected capacity change from 0 to 512 [ 93.191488][ T7295] EXT4-fs: Ignoring removed nobh option [ 93.204773][ T7295] EXT4-fs (loop3): failed to initialize system zone (-117) [ 93.212070][ T7295] EXT4-fs (loop3): mount failed [ 93.283195][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 93.310077][ T7307] tipc: Enabling of bearer rejected, failed to enable media [ 93.364619][ T7305] ip6gre7: entered allmulticast mode [ 93.545083][ T7310] loop2: detected capacity change from 0 to 2364 [ 93.552078][ T7310] iso9660: Unknown parameter '0xffffffffffffffff0x0000000000000000' [ 93.777484][ T7295] SELinux: failed to load policy [ 93.831110][ T7317] tipc: Enabled bearer , priority 0 [ 93.851932][ T7316] tipc: Disabling bearer [ 93.887509][ T7321] loop3: detected capacity change from 0 to 1024 [ 94.084962][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.945'. [ 94.103180][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.946'. [ 94.144254][ T7340] ip6gre5: entered allmulticast mode [ 94.212131][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.948'. [ 94.317073][ T7355] loop0: detected capacity change from 0 to 512 [ 94.343470][ T7355] EXT4-fs: Ignoring removed nobh option [ 94.377722][ T7355] EXT4-fs (loop0): failed to initialize system zone (-117) [ 94.396903][ T7355] EXT4-fs (loop0): mount failed [ 94.451746][ T7360] loop3: detected capacity change from 0 to 1024 [ 94.550607][ T7366] SELinux: failed to load policy [ 94.650113][ T7372] tipc: Enabled bearer , priority 0 [ 94.706613][ T7371] tipc: Disabling bearer [ 94.829413][ T7384] loop2: detected capacity change from 0 to 1024 [ 94.886460][ T7393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.895149][ T7393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.895987][ T7394] can0: slcan on ttyS3. [ 94.934581][ T7393] validate_nla: 2 callbacks suppressed [ 94.934600][ T7393] netlink: 'syz.2.965': attribute type 13 has an invalid length. [ 94.947942][ T7393] netlink: 'syz.2.965': attribute type 17 has an invalid length. [ 94.991169][ T7400] netlink: 'syz.2.965': attribute type 2 has an invalid length. [ 95.013679][ T7387] can0 (unregistered): slcan off ttyS3. [ 95.021027][ T7393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.041338][ T7394] can0: slcan on ttyS3. [ 95.109705][ T7387] loop3: detected capacity change from 0 to 512 [ 95.133940][ T7387] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.154320][ T7387] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 95.198036][ T7387] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 95.218634][ T7387] System zones: 1-12 [ 95.222920][ T7387] EXT4-fs (loop3): orphan cleanup on readonly fs [ 95.230955][ T7387] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.963: bg 0: block 361: padding at end of block bitmap is not set [ 95.247344][ T7387] EXT4-fs (loop3): Remounting filesystem read-only [ 95.258334][ T7387] EXT4-fs (loop3): 1 truncate cleaned up [ 95.293369][ T7387] can0 (unregistered): slcan off ttyS3. [ 95.417621][ T7433] can0: slcan on ttyS3. [ 95.463286][ T7433] can0 (unregistered): slcan off ttyS3. [ 95.471776][ T7433] can0: slcan on ttyS3. [ 95.561505][ T7433] can0 (unregistered): slcan off ttyS3. [ 95.616713][ T7443] tipc: Enabled bearer , priority 0 [ 95.625655][ T7442] tipc: Disabling bearer [ 95.659487][ T7447] loop3: detected capacity change from 0 to 1024 [ 95.786908][ T7463] loop0: detected capacity change from 0 to 512 [ 95.806948][ T7454] loop1: detected capacity change from 0 to 1024 [ 95.843429][ T7463] EXT4-fs: Ignoring removed nobh option [ 95.903872][ T7463] EXT4-fs (loop0): failed to initialize system zone (-117) [ 95.916514][ T7463] EXT4-fs (loop0): mount failed [ 96.187391][ T7481] SELinux: failed to load policy [ 96.314800][ T7482] loop3: detected capacity change from 0 to 2364 [ 96.321813][ T7482] iso9660: Unknown parameter '0xffffffffffffffff0x0000000000000000' [ 96.693390][ T7498] loop1: detected capacity change from 0 to 1024 [ 96.750527][ T7501] loop0: detected capacity change from 0 to 1024 [ 96.804769][ T7511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.841457][ T7511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.852167][ T7511] netlink: 'syz.1.997': attribute type 13 has an invalid length. [ 96.860003][ T7511] netlink: 'syz.1.997': attribute type 17 has an invalid length. [ 96.906902][ T7521] netlink: 'syz.1.997': attribute type 2 has an invalid length. [ 96.931300][ T7511] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.995163][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 96.995177][ T29] audit: type=1326 audit(1757022283.958:4663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.4.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bc54ebe9 code=0x7ffc0000 [ 97.049191][ T29] audit: type=1326 audit(1757022283.998:4664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.4.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4bc54ebe9 code=0x7ffc0000 [ 97.072770][ T29] audit: type=1326 audit(1757022283.998:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.4.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bc54ebe9 code=0x7ffc0000 [ 97.089063][ T7538] loop3: detected capacity change from 0 to 512 [ 97.096324][ T29] audit: type=1326 audit(1757022283.998:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.4.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bc54ebe9 code=0x7ffc0000 [ 97.096362][ T29] audit: type=1326 audit(1757022283.998:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.4.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fe4bc54ebe9 code=0x7ffc0000 [ 97.109740][ T7538] EXT4-fs: Ignoring removed nobh option [ 97.126236][ T29] audit: type=1326 audit(1757022283.998:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.4.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bc54ebe9 code=0x7ffc0000 [ 97.157601][ T7539] loop4: detected capacity change from 0 to 1024 [ 97.179013][ T29] audit: type=1326 audit(1757022283.998:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.4.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bc54ebe9 code=0x7ffc0000 [ 97.179151][ T29] audit: type=1326 audit(1757022284.038:4670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.3.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608082ebe9 code=0x7ffc0000 [ 97.232271][ T29] audit: type=1326 audit(1757022284.038:4671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.3.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608082ebe9 code=0x7ffc0000 [ 97.255887][ T29] audit: type=1326 audit(1757022284.038:4672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.3.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f608082ebe9 code=0x7ffc0000 [ 97.287503][ T7538] EXT4-fs (loop3): failed to initialize system zone (-117) [ 97.309296][ T7538] EXT4-fs (loop3): mount failed [ 97.384343][ T7538] SELinux: failed to load policy [ 97.390805][ T7550] loop4: detected capacity change from 0 to 1024 [ 97.432235][ T7557] __nla_validate_parse: 1 callbacks suppressed [ 97.432268][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'. [ 97.451966][ T7557] ip6gre8: entered allmulticast mode [ 97.508059][ T7561] tipc: Enabled bearer , priority 0 [ 97.522120][ T7560] tipc: Resetting bearer [ 97.543603][ T7560] tipc: Disabling bearer [ 97.555043][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1019'. [ 97.597473][ T7573] tipc: Enabled bearer , priority 0 [ 97.605744][ T7572] tipc: Disabling bearer [ 97.654605][ T7581] loop1: detected capacity change from 0 to 512 [ 97.661394][ T7581] EXT4-fs: Ignoring removed nobh option [ 97.671794][ T7581] EXT4-fs (loop1): failed to initialize system zone (-117) [ 97.682626][ T7581] EXT4-fs (loop1): mount failed [ 97.732273][ T7583] loop3: detected capacity change from 0 to 1024 [ 97.734820][ T7581] SELinux: failed to load policy [ 97.747882][ T7588] loop4: detected capacity change from 0 to 512 [ 97.766684][ T7588] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.775053][ T7588] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.783291][ T7588] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.791818][ T7588] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.832620][ T7588] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.1026: Allocating blocks 41-42 which overlap fs metadata [ 97.866032][ T7588] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1026: Failed to acquire dquot type 1 [ 97.905875][ T7588] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 97.920736][ T7588] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.1026: corrupted inode contents [ 97.933715][ T7588] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #12: comm syz.4.1026: mark_inode_dirty error [ 97.946324][ T7588] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.1026: corrupted inode contents [ 97.958502][ T7588] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.1026: mark_inode_dirty error [ 97.971744][ T7588] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.1026: corrupted inode contents [ 97.975123][ T7602] can0: slcan on ttyS3. [ 97.993399][ T7588] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 98.002205][ T7588] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.1026: corrupted inode contents [ 98.014732][ T7588] EXT4-fs error (device loop4): ext4_truncate:4666: inode #12: comm syz.4.1026: mark_inode_dirty error [ 98.026446][ T7588] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 98.035962][ T7588] EXT4-fs (loop4): 1 truncate cleaned up [ 98.048140][ T7606] loop0: detected capacity change from 0 to 512 [ 98.055204][ T7606] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.062592][ T7606] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 98.073078][ T7607] can0 (unregistered): slcan off ttyS3. [ 98.077826][ T7606] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 98.081785][ T7602] can0: slcan on ttyS3. [ 98.092338][ T7606] System zones: 1-12 [ 98.096823][ T7606] EXT4-fs (loop0): orphan cleanup on readonly fs [ 98.104201][ T7603] loop3: detected capacity change from 0 to 512 [ 98.110890][ T7603] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.120381][ T7603] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 98.138158][ T7606] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1031: bg 0: block 361: padding at end of block bitmap is not set [ 98.152552][ T7603] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 98.160646][ T7603] System zones: 1-12 [ 98.165616][ T7606] EXT4-fs (loop0): Remounting filesystem read-only [ 98.172423][ T7603] EXT4-fs (loop3): orphan cleanup on readonly fs [ 98.180232][ T7606] EXT4-fs (loop0): 1 truncate cleaned up [ 98.186719][ T7603] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1028: bg 0: block 361: padding at end of block bitmap is not set [ 98.224320][ T7603] EXT4-fs (loop3): Remounting filesystem read-only [ 98.240933][ T7603] EXT4-fs (loop3): 1 truncate cleaned up [ 98.252895][ T7624] tipc: Enabled bearer , priority 0 [ 98.262341][ T7623] tipc: Disabling bearer [ 98.363827][ T7603] can0 (unregistered): slcan off ttyS3. [ 98.412442][ T7642] loop0: detected capacity change from 0 to 512 [ 98.412957][ T7645] tipc: Enabled bearer , priority 0 [ 98.422481][ T7642] EXT4-fs: Ignoring removed nobh option [ 98.432704][ T7644] tipc: Disabling bearer [ 98.444679][ T7642] EXT4-fs (loop0): failed to initialize system zone (-117) [ 98.452099][ T7642] EXT4-fs (loop0): mount failed [ 98.506100][ T7648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.521389][ T7642] SELinux: failed to load policy [ 98.526739][ T7648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.539162][ T7648] netlink: 'syz.2.1037': attribute type 13 has an invalid length. [ 98.547173][ T7648] netlink: 'syz.2.1037': attribute type 17 has an invalid length. [ 98.590698][ T7660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.600294][ T7660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.611853][ T7660] netlink: 'syz.0.1041': attribute type 13 has an invalid length. [ 98.619744][ T7660] netlink: 'syz.0.1041': attribute type 17 has an invalid length. [ 98.628229][ T7648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.648620][ T7666] loop3: detected capacity change from 0 to 1024 [ 98.658258][ T7660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.892169][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1050'. [ 98.903898][ T7690] ip6gre8: entered allmulticast mode [ 98.935623][ T7692] loop4: detected capacity change from 0 to 512 [ 98.942705][ T7692] EXT4-fs: Ignoring removed nobh option [ 98.950732][ T7692] EXT4-fs (loop4): failed to initialize system zone (-117) [ 98.958209][ T7692] EXT4-fs (loop4): mount failed [ 98.997858][ T7697] loop1: detected capacity change from 0 to 1024 [ 99.000612][ T7692] SELinux: failed to load policy [ 99.090836][ T7706] loop1: detected capacity change from 0 to 512 [ 99.097966][ T7706] EXT4-fs: Ignoring removed nobh option [ 99.105620][ T7706] EXT4-fs (loop1): failed to initialize system zone (-117) [ 99.113579][ T7706] EXT4-fs (loop1): mount failed [ 99.346295][ T7723] loop0: detected capacity change from 0 to 1024 [ 99.364820][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1062'. [ 99.381349][ T7726] ip6gre4: entered allmulticast mode [ 99.489632][ T7719] loop2: detected capacity change from 0 to 1024 [ 99.496521][ T7719] EXT4-fs: Ignoring removed orlov option [ 99.502322][ T7719] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.517281][ T7737] loop4: detected capacity change from 0 to 1024 [ 99.711436][ T7746] loop4: detected capacity change from 0 to 512 [ 99.722138][ T7746] EXT4-fs: Ignoring removed nobh option [ 99.735068][ T7746] EXT4-fs (loop4): failed to initialize system zone (-117) [ 99.742671][ T7746] EXT4-fs (loop4): mount failed [ 99.783961][ T7748] loop3: detected capacity change from 0 to 1024 [ 99.875335][ T7752] loop4: detected capacity change from 0 to 512 [ 99.882468][ T7752] EXT4-fs: Ignoring removed nobh option [ 99.891483][ T7752] EXT4-fs (loop4): failed to initialize system zone (-117) [ 99.899253][ T7752] EXT4-fs (loop4): mount failed [ 99.961030][ T7752] SELinux: failed to load policy [ 100.068239][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1075'. [ 100.082917][ T7768] ip6gre6: entered allmulticast mode [ 100.158855][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1078'. [ 100.180699][ T7774] loop4: detected capacity change from 0 to 2364 [ 100.203408][ T7774] iso9660: Unknown parameter '0x000000000000002a0x0000000000000000' [ 100.236810][ T7775] loop3: detected capacity change from 0 to 512 [ 100.251794][ T7775] EXT4-fs: Ignoring removed nobh option [ 100.297697][ T7775] EXT4-fs (loop3): failed to initialize system zone (-117) [ 100.310267][ T7783] loop4: detected capacity change from 0 to 1024 [ 100.318868][ T7775] EXT4-fs (loop3): mount failed [ 100.334764][ T7787] loop1: detected capacity change from 0 to 512 [ 100.374984][ T7775] SELinux: failed to load policy [ 100.391947][ T7787] EXT4-fs: Ignoring removed nobh option [ 100.421369][ T7787] EXT4-fs (loop1): failed to initialize system zone (-117) [ 100.429126][ T7787] EXT4-fs (loop1): mount failed [ 100.544370][ T7800] loop3: detected capacity change from 0 to 512 [ 100.551931][ T7800] EXT4-fs: Ignoring removed nobh option [ 100.562191][ T7800] EXT4-fs (loop3): failed to initialize system zone (-117) [ 100.569808][ T7800] EXT4-fs (loop3): mount failed [ 100.612217][ T7800] SELinux: failed to load policy [ 100.639834][ T7794] loop4: detected capacity change from 0 to 1024 [ 100.646695][ T7794] EXT4-fs: Ignoring removed orlov option [ 100.652419][ T7794] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.671913][ T7794] EXT4-fs mount: 92 callbacks suppressed [ 100.671929][ T7794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.693915][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1088'. [ 100.978595][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1093'. [ 101.006073][ T7817] loop2: detected capacity change from 0 to 2364 [ 101.012853][ T7817] iso9660: Unknown parameter '0x000000000000002a0x0000000000000000' [ 101.058773][ T7824] tipc: Started in network mode [ 101.063758][ T7824] tipc: Node identity aa0cc8e6ae38, cluster identity 4711 [ 101.071149][ T7824] tipc: Enabled bearer , priority 0 [ 101.080327][ T7825] loop3: detected capacity change from 0 to 1024 [ 101.087938][ T7823] tipc: Disabling bearer [ 101.117312][ T7825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.146329][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.161755][ T7829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.172950][ T7829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.182532][ T7829] validate_nla: 2 callbacks suppressed [ 101.182550][ T7829] netlink: 'syz.2.1097': attribute type 13 has an invalid length. [ 101.196111][ T7829] netlink: 'syz.2.1097': attribute type 17 has an invalid length. [ 101.222903][ T7829] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.245756][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.271441][ T7838] loop4: detected capacity change from 0 to 512 [ 101.290660][ T7838] EXT4-fs: Ignoring removed nobh option [ 101.296558][ T7829] netlink: 'syz.2.1097': attribute type 2 has an invalid length. [ 101.319891][ T7838] EXT4-fs (loop4): failed to initialize system zone (-117) [ 101.330446][ T7843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.332470][ T7838] EXT4-fs (loop4): mount failed [ 101.367161][ T7843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.385826][ T7843] netlink: 'syz.3.1102': attribute type 13 has an invalid length. [ 101.388187][ T7838] SELinux: failed to load policy [ 101.393826][ T7843] netlink: 'syz.3.1102': attribute type 17 has an invalid length. [ 101.415951][ T7843] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.434804][ T7843] netlink: 'syz.3.1102': attribute type 2 has an invalid length. [ 101.832110][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1108'. [ 101.841143][ T7863] IPVS: Error joining to the multicast group [ 102.231078][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1113'. [ 102.368067][ T7886] loop2: detected capacity change from 0 to 1024 [ 102.380565][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 102.380581][ T29] audit: type=1326 audit(1757022289.328:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.3.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608082ebe9 code=0x7ffc0000 [ 102.410278][ T29] audit: type=1326 audit(1757022289.328:4991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.3.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608082ebe9 code=0x7ffc0000 [ 102.647811][ T7896] loop0: detected capacity change from 0 to 2364 [ 102.654784][ T7896] iso9660: Unknown parameter '0xffffffffffffffff0x0000000000000000' [ 102.776284][ T7900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.876699][ T7886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.885999][ T29] audit: type=1326 audit(1757022289.388:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.3.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f608082ebe9 code=0x7ffc0000 [ 102.909663][ T7900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.912142][ T29] audit: type=1326 audit(1757022289.388:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.3.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608082ebe9 code=0x7ffc0000 [ 102.943423][ T29] audit: type=1326 audit(1757022289.388:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.3.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f608082ebe9 code=0x7ffc0000 [ 102.967152][ T29] audit: type=1326 audit(1757022289.388:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.3.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608082ebe9 code=0x7ffc0000 [ 102.990761][ T29] audit: type=1326 audit(1757022289.388:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.3.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f608082ebe9 code=0x7ffc0000 [ 103.014216][ T29] audit: type=1326 audit(1757022289.388:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.3.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608082ebe9 code=0x7ffc0000 [ 103.037668][ T29] audit: type=1326 audit(1757022289.388:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.3.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f608082ebe9 code=0x7ffc0000 [ 103.061150][ T29] audit: type=1326 audit(1757022289.388:4999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.3.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608082ebe9 code=0x7ffc0000 [ 103.134429][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.144765][ T7900] netlink: 'syz.1.1121': attribute type 13 has an invalid length. [ 103.152605][ T7900] netlink: 'syz.1.1121': attribute type 17 has an invalid length. [ 103.204731][ T7915] netlink: 'syz.1.1121': attribute type 2 has an invalid length. [ 103.235503][ T7900] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.268008][ T7918] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 103.316389][ T7917] loop4: detected capacity change from 0 to 512 [ 103.328109][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'. [ 103.339109][ T7917] EXT4-fs: Ignoring removed nobh option [ 103.356037][ T7917] EXT4-fs (loop4): failed to initialize system zone (-117) [ 103.364603][ T7917] EXT4-fs (loop4): mount failed [ 103.408302][ T7920] can0: slcan on ttyS3. [ 103.417193][ T7917] SELinux: failed to load policy [ 103.496967][ T7920] can0 (unregistered): slcan off ttyS3. [ 103.526976][ T7934] can0: slcan on ttyS3. [ 103.538862][ T7920] loop2: detected capacity change from 0 to 512 [ 103.554803][ T7920] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.564230][ T7920] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 103.576242][ T7937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.594143][ T7920] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 103.602398][ T7937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.603103][ T7920] System zones: 1-12 [ 103.746619][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1131'. [ 103.755741][ T7947] IPVS: Error joining to the multicast group [ 103.813940][ T7920] EXT4-fs (loop2): orphan cleanup on readonly fs [ 103.830195][ T7937] netlink: 'syz.4.1135': attribute type 13 has an invalid length. [ 103.993445][ T7920] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1128: bg 0: block 361: padding at end of block bitmap is not set [ 104.008683][ T7920] EXT4-fs (loop2): Remounting filesystem read-only [ 104.016777][ T7920] EXT4-fs (loop2): 1 truncate cleaned up [ 104.037188][ T7920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 104.051193][ T7937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.191732][ T7954] loop0: detected capacity change from 0 to 2364 [ 104.198895][ T7954] iso9660: Unknown parameter '0xffffffffffffffff0x0000000000000000' [ 104.463611][ T7920] can0 (unregistered): slcan off ttyS3. [ 104.496617][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 104.721645][ T7996] loop3: detected capacity change from 0 to 512 [ 104.794380][ T7996] EXT4-fs: Ignoring removed nobh option [ 104.818580][ T7996] EXT4-fs (loop3): failed to initialize system zone (-117) [ 104.911462][ T7999] tipc: Enabled bearer , priority 0 [ 104.928308][ T7996] EXT4-fs (loop3): mount failed [ 104.937004][ T7997] tipc: Resetting bearer [ 105.070434][ T7996] SELinux: failed to load policy [ 105.074039][ T7997] tipc: Disabling bearer [ 105.216179][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1148'. [ 105.225200][ T8009] IPVS: Error joining to the multicast group [ 105.542134][ T8019] tipc: Enabling of bearer rejected, failed to enable media [ 105.557204][ T8015] can0: slcan on ttyS3. [ 105.603331][ T8015] can0 (unregistered): slcan off ttyS3. [ 105.612522][ T8015] can0: slcan on ttyS3. [ 105.624641][ T8015] loop4: detected capacity change from 0 to 512 [ 105.654758][ T8015] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.673882][ T8015] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 105.853387][ T8015] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 105.877567][ T8015] System zones: 1-12 [ 105.881941][ T8015] EXT4-fs (loop4): orphan cleanup on readonly fs [ 105.931224][ T8015] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1151: bg 0: block 361: padding at end of block bitmap is not set [ 105.949105][ T8049] loop1: detected capacity change from 0 to 512 [ 105.966748][ T8052] loop3: detected capacity change from 0 to 1024 [ 105.974210][ T8015] EXT4-fs (loop4): Remounting filesystem read-only [ 105.978373][ T8049] EXT4-fs: Ignoring removed nobh option [ 105.991985][ T8015] EXT4-fs (loop4): 1 truncate cleaned up [ 106.013855][ T8049] EXT4-fs (loop1): failed to initialize system zone (-117) [ 106.021771][ T8049] EXT4-fs (loop1): mount failed [ 106.024928][ T8015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 106.109521][ T8052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.136492][ T8049] SELinux: failed to load policy [ 106.190116][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.199381][ T8015] can0 (unregistered): slcan off ttyS3. [ 106.207752][ T8076] tipc: Enabling of bearer rejected, failed to enable media [ 106.233713][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 106.312303][ T8088] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1168'. [ 106.367516][ T8094] loop3: detected capacity change from 0 to 1024 [ 106.451524][ T8099] loop0: detected capacity change from 0 to 512 [ 106.473672][ T8094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.479282][ T8099] EXT4-fs: Ignoring removed nobh option [ 106.662129][ T8107] loop4: detected capacity change from 0 to 2364 [ 106.669016][ T8107] iso9660: Unknown parameter '0xffffffffffffffff0x0000000000000000' [ 106.794431][ T8099] EXT4-fs (loop0): failed to initialize system zone (-117) [ 106.924658][ T8099] EXT4-fs (loop0): mount failed [ 106.997953][ T8120] loop1: detected capacity change from 0 to 512 [ 107.006386][ T8123] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 107.018360][ T8120] EXT4-fs: Ignoring removed nobh option [ 107.024208][ T8123] SELinux: failed to load policy [ 107.037396][ T8120] EXT4-fs (loop1): failed to initialize system zone (-117) [ 107.053281][ T8120] EXT4-fs (loop1): mount failed [ 107.060953][ T8127] can0: slcan on ttyS3. [ 107.110641][ T8120] SELinux: failed to load policy [ 107.118393][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.128392][ T8127] can0 (unregistered): slcan off ttyS3. [ 107.143680][ T8127] can0: slcan on ttyS3. [ 107.183952][ T8127] can0 (unregistered): slcan off ttyS3. [ 107.321363][ T8138] FAULT_INJECTION: forcing a failure. [ 107.321363][ T8138] name failslab, interval 1, probability 0, space 0, times 0 [ 107.334403][ T8138] CPU: 0 UID: 0 PID: 8138 Comm: syz.4.1179 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.334436][ T8138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.334451][ T8138] Call Trace: [ 107.334470][ T8138] [ 107.334479][ T8138] __dump_stack+0x1d/0x30 [ 107.334501][ T8138] dump_stack_lvl+0xe8/0x140 [ 107.334523][ T8138] dump_stack+0x15/0x1b [ 107.334551][ T8138] should_fail_ex+0x265/0x280 [ 107.334577][ T8138] ? allocate_file_region_entries+0xd2/0x310 [ 107.334688][ T8138] should_failslab+0x8c/0xb0 [ 107.334735][ T8138] __kmalloc_cache_noprof+0x4c/0x320 [ 107.334770][ T8138] allocate_file_region_entries+0xd2/0x310 [ 107.334820][ T8138] region_chg+0x232/0x2d0 [ 107.334965][ T8138] alloc_hugetlb_folio+0x312/0x1070 [ 107.335053][ T8138] hugetlb_fault+0xd71/0x1b50 [ 107.335089][ T8138] handle_mm_fault+0x1861/0x2c20 [ 107.335123][ T8138] ? mt_find+0x200/0x320 [ 107.335228][ T8138] ? down_read+0x77/0xe0 [ 107.335255][ T8138] __get_user_pages+0x102e/0x1fa0 [ 107.335308][ T8138] __mm_populate+0x243/0x3a0 [ 107.335408][ T8138] do_mlock+0x47f/0x520 [ 107.335437][ T8138] ? __bpf_trace_sys_enter+0x10/0x30 [ 107.335520][ T8138] ? trace_sys_enter+0xd0/0xf0 [ 107.335624][ T8138] __x64_sys_mlock+0x36/0x50 [ 107.335721][ T8138] x64_sys_call+0x18f8/0x2ff0 [ 107.335747][ T8138] do_syscall_64+0xd2/0x200 [ 107.335858][ T8138] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 107.335882][ T8138] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 107.335915][ T8138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.335986][ T8138] RIP: 0033:0x7fe4bc54ebe9 [ 107.336005][ T8138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.336028][ T8138] RSP: 002b:00007fe4bafb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 107.336045][ T8138] RAX: ffffffffffffffda RBX: 00007fe4bc785fa0 RCX: 00007fe4bc54ebe9 [ 107.336058][ T8138] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 107.336069][ T8138] RBP: 00007fe4bafb7090 R08: 0000000000000000 R09: 0000000000000000 [ 107.336081][ T8138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.336094][ T8138] R13: 00007fe4bc786038 R14: 00007fe4bc785fa0 R15: 00007ffda66b6b78 [ 107.336155][ T8138] [ 107.582840][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 107.582858][ T29] audit: type=1400 audit(1757022294.528:5200): avc: denied { ioctl } for pid=8132 comm="syz.1.1177" path="socket:[16328]" dev="sockfs" ino=16328 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.615580][ T29] audit: type=1326 audit(1757022294.578:5201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8136 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe4bc4eadb9 code=0x7ffc0000 [ 107.638964][ T29] audit: type=1326 audit(1757022294.578:5202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8136 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe4bc54d5fc code=0x7ffc0000 [ 107.639004][ T8137] loop1: detected capacity change from 0 to 512 [ 107.639417][ T8137] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.662287][ T29] audit: type=1326 audit(1757022294.578:5203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8136 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe4bc54d69f code=0x7ffc0000 [ 107.672469][ T8137] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 107.675274][ T29] audit: type=1326 audit(1757022294.578:5204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8136 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe4bc54d84a code=0x7ffc0000 [ 107.731765][ T29] audit: type=1326 audit(1757022294.578:5205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8136 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bc54ebe9 code=0x7ffc0000 [ 107.739634][ T8137] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 107.755393][ T29] audit: type=1326 audit(1757022294.578:5206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8136 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bc54ebe9 code=0x7ffc0000 [ 107.763464][ T8137] System zones: 1-12 [ 107.790949][ T8137] EXT4-fs (loop1): orphan cleanup on readonly fs [ 107.802685][ T8137] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1177: bg 0: block 361: padding at end of block bitmap is not set [ 107.819444][ T8150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1181'. [ 107.830616][ T8137] EXT4-fs (loop1): Remounting filesystem read-only [ 107.857007][ T8137] EXT4-fs (loop1): 1 truncate cleaned up [ 107.858190][ T8162] loop0: detected capacity change from 0 to 512 [ 107.878468][ T8158] loop3: detected capacity change from 0 to 1024 [ 107.885444][ T8137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 107.888767][ T8162] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.925241][ T8162] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.934054][ T8162] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.942606][ T8162] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.000645][ T8172] loop2: detected capacity change from 0 to 2364 [ 108.008182][ T8158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.022940][ T8162] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.1185: Allocating blocks 41-42 which overlap fs metadata [ 108.037160][ T8172] iso9660: Unknown parameter '0x000000000000002a0x0000000000000000' [ 108.053238][ T8162] Quota error (device loop0): write_blk: dquota write failed [ 108.060655][ T8162] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 108.071891][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 108.101444][ T8162] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.1185: Allocating blocks 41-42 which overlap fs metadata [ 108.130880][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.150331][ T8162] Quota error (device loop0): write_blk: dquota write failed [ 108.186725][ T8162] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1185: Failed to acquire dquot type 1 [ 108.200717][ T8183] loop4: detected capacity change from 0 to 1024 [ 108.217337][ T8189] FAULT_INJECTION: forcing a failure. [ 108.217337][ T8189] name failslab, interval 1, probability 0, space 0, times 0 [ 108.230014][ T8189] CPU: 0 UID: 0 PID: 8189 Comm: syz.2.1192 Not tainted syzkaller #0 PREEMPT(voluntary) [ 108.230117][ T8189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.230133][ T8189] Call Trace: [ 108.230176][ T8189] [ 108.230186][ T8189] __dump_stack+0x1d/0x30 [ 108.230208][ T8189] dump_stack_lvl+0xe8/0x140 [ 108.230226][ T8189] dump_stack+0x15/0x1b [ 108.230242][ T8189] should_fail_ex+0x265/0x280 [ 108.230262][ T8189] should_failslab+0x8c/0xb0 [ 108.230359][ T8189] kmem_cache_alloc_noprof+0x50/0x310 [ 108.230408][ T8189] ? audit_log_start+0x365/0x6c0 [ 108.230442][ T8189] ? copy_regset_to_user+0x7f/0x180 [ 108.230463][ T8189] audit_log_start+0x365/0x6c0 [ 108.230575][ T8189] ? copy_regset_to_user+0x143/0x180 [ 108.230605][ T8189] audit_seccomp+0x48/0x100 [ 108.230638][ T8189] ? __seccomp_filter+0x68c/0x10d0 [ 108.230666][ T8189] __seccomp_filter+0x69d/0x10d0 [ 108.230704][ T8189] ? task_rq_lock+0x47/0xd0 [ 108.230736][ T8189] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 108.230770][ T8189] ? wait_task_inactive+0x1b5/0x2d0 [ 108.230808][ T8189] ? bpf_trace_run2+0x124/0x1c0 [ 108.230835][ T8189] __secure_computing+0x82/0x150 [ 108.230936][ T8189] syscall_trace_enter+0xcf/0x1e0 [ 108.230975][ T8189] do_syscall_64+0xac/0x200 [ 108.231011][ T8189] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 108.231040][ T8189] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 108.231066][ T8189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.231141][ T8189] RIP: 0033:0x7f3155ccd5fc [ 108.231157][ T8189] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 108.231230][ T8189] RSP: 002b:00007f315472f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.231248][ T8189] RAX: ffffffffffffffda RBX: 00007f3155f05fa0 RCX: 00007f3155ccd5fc [ 108.231261][ T8189] RDX: 000000000000000f RSI: 00007f315472f0a0 RDI: 0000000000000006 [ 108.231277][ T8189] RBP: 00007f315472f090 R08: 0000000000000000 R09: 0000000000000000 [ 108.231292][ T8189] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 108.231304][ T8189] R13: 00007f3155f06038 R14: 00007f3155f05fa0 R15: 00007ffc09e75d38 [ 108.231322][ T8189] [ 108.463038][ T8162] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 108.484211][ T8162] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.1185: corrupted inode contents [ 108.947941][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1191'. [ 108.957014][ T8205] IPVS: Error joining to the multicast group [ 108.976822][ T8199] loop1: detected capacity change from 0 to 2364 [ 108.983826][ T8199] iso9660: Unknown parameter '0xffffffffffffffff0x0000000000000000' [ 109.041801][ T8183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.268198][ T8214] tipc: Enabling of bearer rejected, failed to enable media [ 109.331158][ T8162] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #12: comm syz.0.1185: mark_inode_dirty error [ 109.377082][ T8216] loop2: detected capacity change from 0 to 512 [ 109.398588][ T8216] EXT4-fs: Ignoring removed nobh option [ 109.412265][ T8162] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.1185: corrupted inode contents [ 109.431259][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.451106][ T8162] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.1185: mark_inode_dirty error [ 109.470472][ T8220] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1195'. [ 109.492347][ T8216] EXT4-fs (loop2): failed to initialize system zone (-117) [ 109.504830][ T8216] EXT4-fs (loop2): mount failed [ 109.513909][ T8162] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.1185: corrupted inode contents [ 109.550956][ T8162] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 109.559949][ T8162] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.1185: corrupted inode contents [ 109.572345][ T8162] EXT4-fs error (device loop0): ext4_truncate:4666: inode #12: comm syz.0.1185: mark_inode_dirty error [ 109.594610][ T8216] SELinux: failed to load policy [ 109.606156][ T8231] loop1: detected capacity change from 0 to 764 [ 109.616333][ T8162] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 109.627273][ T8162] EXT4-fs (loop0): 1 truncate cleaned up [ 109.634191][ T8162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.642430][ T8231] iso9660: Unknown parameter 'ÿÿÿ' [ 109.666259][ T8235] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1201'. [ 109.726888][ T8238] loop2: detected capacity change from 0 to 2364 [ 109.730238][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1200'. [ 109.749025][ T8238] iso9660: Unknown parameter '0x000000000000002a0x0000000000000000' [ 109.910764][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.972677][ T8248] loop0: detected capacity change from 0 to 512 [ 110.025543][ T8248] EXT4-fs: Ignoring removed nobh option [ 110.116665][ T8248] EXT4-fs (loop0): failed to initialize system zone (-117) [ 110.130666][ T8248] EXT4-fs (loop0): mount failed [ 110.204585][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1206'. [ 110.213665][ T8254] IPVS: Error joining to the multicast group [ 110.576783][ T8259] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 110.602704][ T8259] SELinux: failed to load policy [ 110.708922][ T8265] can0: slcan on ttyS3. [ 110.783422][ T8265] can0 (unregistered): slcan off ttyS3. [ 110.792201][ T8269] can0: slcan on ttyS3. [ 110.893741][ T8265] can0 (unregistered): slcan off ttyS3. [ 110.922822][ T8275] loop1: detected capacity change from 0 to 2364 [ 110.987241][ T8284] can0: slcan on ttyS3. [ 111.018861][ T8275] iso9660: Unknown parameter '0x000000000000002a0x0000000000000000' [ 111.033316][ T8293] loop4: detected capacity change from 0 to 1024 [ 111.044176][ T8284] can0 (unregistered): slcan off ttyS3. [ 111.052523][ T8294] can0: slcan on ttyS3. [ 111.061035][ T8284] loop0: detected capacity change from 0 to 512 [ 111.071676][ T8284] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.088098][ T8293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.114175][ T8284] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 111.149518][ T2] ================================================================== [ 111.157759][ T2] BUG: KCSAN: data-race in copy_process / free_pid [ 111.164284][ T2] [ 111.166612][ T2] read-write to 0xffffffff8685fc48 of 4 bytes by task 3305 on cpu 0: [ 111.174685][ T2] free_pid+0x77/0x180 [ 111.178766][ T2] free_pids+0x54/0xb0 [ 111.182851][ T2] release_task+0x9a9/0xb60 [ 111.187381][ T2] wait_consider_task+0x114a/0x1660 [ 111.192586][ T2] __do_wait+0xfa/0x510 [ 111.196755][ T2] do_wait+0xb7/0x260 [ 111.200751][ T2] kernel_wait4+0x16b/0x1e0 [ 111.205272][ T2] __x64_sys_wait4+0x91/0x120 [ 111.209969][ T2] x64_sys_call+0x2a66/0x2ff0 [ 111.214674][ T2] do_syscall_64+0xd2/0x200 [ 111.219217][ T2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.225140][ T2] [ 111.227481][ T2] read to 0xffffffff8685fc48 of 4 bytes by task 2 on cpu 1: [ 111.234859][ T2] copy_process+0x14a6/0x2000 [ 111.239647][ T2] kernel_clone+0x16c/0x5c0 [ 111.244164][ T2] kernel_thread+0xac/0xe0 [ 111.248686][ T2] kthreadd+0x28d/0x360 [ 111.252844][ T2] ret_from_fork+0xda/0x150 [ 111.257375][ T2] ret_from_fork_asm+0x1a/0x30 [ 111.262162][ T2] [ 111.264487][ T2] value changed: 0x800000e6 -> 0x800000e5 [ 111.270220][ T2] [ 111.272545][ T2] Reported by Kernel Concurrency Sanitizer on: [ 111.278702][ T2] CPU: 1 UID: 0 PID: 2 Comm: kthreadd Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.288081][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.298141][ T2] ================================================================== [ 111.363219][ T8284] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 111.372431][ T8284] System zones: 1-12 [ 111.381554][ T8284] EXT4-fs (loop0): orphan cleanup on readonly fs [ 111.401907][ T8284] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1218: bg 0: block 361: padding at end of block bitmap is not set [ 111.439262][ T8284] EXT4-fs (loop0): Remounting filesystem read-only [ 111.454328][ T8284] EXT4-fs (loop0): 1 truncate cleaned up [ 111.563810][ T8284] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 111.679243][ T8308] loop1: detected capacity change from 0 to 2364 [ 111.686196][ T8308] iso9660: Unknown parameter '0xffffffffffffffff0x0000000000000000' [ 111.919175][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.013357][ T8284] can0 (unregistered): slcan off ttyS3. [ 112.020093][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.