last executing test programs:

48.256634711s ago: executing program 0 (id=60):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x25e, &(0x7f0000000b40)="$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")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1)
creat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
open(&(0x7f0000002000)='./bus\x00', 0x14b142, 0x0)

48.100714281s ago: executing program 0 (id=68):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="7d041816be2cb54fa0aaaa000004424203"], 0x0)

48.03083084s ago: executing program 0 (id=73):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
pidfd_send_signal(0xffffffffffffffff, 0x4, 0x0, 0x0)

47.98003151s ago: executing program 0 (id=75):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@filename='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x201000, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000200)='./file0\x00')

47.94743122s ago: executing program 0 (id=77):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000004c0)=@sg0, 0x0, 0x0)

47.683501739s ago: executing program 3 (id=86):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2)
sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r3, 0x30b}, 0x14}}, 0x40000)

47.657153059s ago: executing program 3 (id=87):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="17000000000000"], 0x48)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x0, 0x2}]}}}], 0x38}, 0x0)

47.623046489s ago: executing program 3 (id=88):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvlan1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x3, 0x6, @random="cea0300a1672"}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x10)

47.569763209s ago: executing program 3 (id=90):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x240)

47.537059118s ago: executing program 3 (id=91):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000110000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400"], 0x28}}, 0x0)

47.300282977s ago: executing program 3 (id=99):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc000, 0x1b400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

47.300107698s ago: executing program 32 (id=99):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc000, 0x1b400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

46.714546945s ago: executing program 0 (id=109):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x400, 0x0)
close_range(r0, r3, 0x0)

46.714410975s ago: executing program 33 (id=109):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x400, 0x0)
close_range(r0, r3, 0x0)

28.380999788s ago: executing program 2 (id=717):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x18)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00')
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r2, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10)
close_range(r1, 0xffffffffffffffff, 0x0)

28.312030028s ago: executing program 2 (id=720):
r0 = socket(0x10, 0x3, 0x0)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0)

28.183155268s ago: executing program 2 (id=721):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x40)

28.094096877s ago: executing program 2 (id=722):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@init_itable}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000980)="$eJzs3d9rW1UcAPDvTdP96nQdjKE+SGGgk7l0bf0xwYf5KDoc6PsM7V0ZTZfRpGOtA7cH9+KLDEHEgfjkk+8+Dv8B/4qBDoaMog++VG5602Zr0mZdtmbm84HbnnPPTc89Ofd7em5OQgIYWGPZj0LEyxHxTRJxqKWsGHnh2NpxKw+uTWdbEqurn/6VRJLvax6f5L9H8sxLEfHbVxEnCpvrrS0tz5UrlXQhz4/X5y+P15aWT16cL8+ms+mlyamp029PTb737js9a+sb5/75/pM7H57++tjKd7/cO3wriTNxMC9rbccTuN6aGYux/DkZjjOPHDjRg8r6SbLbJ8CODOVxPhzZGHAohvKoB/7/voyIVWBAJeIfBlRzHtC8t+/RffBz4/4HazdAG+3/OS8prr02Evsa90YHVpKH7oyy+93RHtSf1fHrn7dvZVv07nUIgG1dvxERp4rFzeN/ko9/O3eqi2MercP4B8/OnWz+82a7+V9hff4TbeY/I21idye2j//CvR5U01E2/3u/7fx3fdFqdCjPvdCY8w0nFy5W0mxsezEijsfw3iy/1XrO6ZW7q53KWud/2ZbV35wL5udxr7j34cfMlOvlJ2lzq/s3Il4ptmt/st7/SZv+z56Pc13WcTS9/Wqnsu3b/3St/hTxetv+31jRSrZenxxvXA/jzatis79vHv29U/273f6s/w9s3f7RpHW9tvb4dfy479+0U9lOr/89yWeN9J5839Vyvb4wEbEn+Xjz/smNxzbzzeOz9h8/tvX41+763x8Rn3fZ/ptHbnY8tB/6f+ax+v/xE3c/+uKHTvV31/9vNVLH8z3djH/dnuCTPHcAAAAAAADQbwoRcTCSQmk9XSiUSmvv7zgSBwqVaq1+4kJ18dJMND4rOxrDheZK90jL+yEm8vfDNvOTj+SnIuJwRHw7tL+RL01XKzO73XgAAAAAAAAAAAAAAAAAAADoEyMdPv+f+WNot88OeOp85TcMrm3jvxff9AT0Jf//YXCJfxhc4h8Gl/iHwSX+YXCJfxhc4h8Gl/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2ra48uDad5WeuLC3OVa+cnElrc6X5xenSdHXhcmm2Wp2tpKXp6vx2f69SrV6emIzFq+P1tFYfry0tn5+vLl6qn784X55Nz6fDz6RVAAAAAAAAAAAAAAAAAAAA8HypLS3PlSuVdEHiuUi8FhF9cBotiWJ/nIZEjxO7PTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIb/AgAA//84SzbQ")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000500)='./bus\x00', 0x800, 0x102)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae65ddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff402000000000000006ee6afaaf755a3f6a00400", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400", [0x8000000000]})
write$selinux_create(r0, &(0x7f00000008c0)=@objname={'system_u:object_r:auditd_var_run_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x80, 0x20, './file3\x00'}, 0x53)

27.702167116s ago: executing program 2 (id=729):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x10001}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x5, 0x100}]}}]}, 0x38}}, 0x0)

27.553187505s ago: executing program 2 (id=732):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10)
chmod(&(0x7f0000000180)='./file0\x00', 0x0)

27.503074914s ago: executing program 34 (id=732):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10)
chmod(&(0x7f0000000180)='./file0\x00', 0x0)

24.304543761s ago: executing program 7 (id=821):
r0 = socket$kcm(0x21, 0x2, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000c80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95dc16a39b1a6c900000000000000001000005040500002b24ec10024b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)

24.262699331s ago: executing program 7 (id=823):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x7f, 0xc}]}}}}}}}}, 0x0)

24.195443151s ago: executing program 7 (id=826):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r2}, 0x10)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1)

24.10766747s ago: executing program 7 (id=839):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@init_itable}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000980)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000500)='./bus\x00', 0x800, 0x102)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae65ddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff402000000000000006ee6afaaf755a3f6a00400", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400", [0x8000000000]})
write$selinux_create(r0, &(0x7f00000008c0)=@objname={'system_u:object_r:auditd_var_run_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x80, 0x20, './file3\x00'}, 0x53)

23.862448919s ago: executing program 7 (id=834):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x89901)
umount2(&(0x7f0000019140)='./file0/file0\x00', 0x1)

22.868129555s ago: executing program 5 (id=851):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

22.804061135s ago: executing program 5 (id=854):
mkdir(&(0x7f0000000000)='./file0\x00', 0x5)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x2)

22.780409735s ago: executing program 5 (id=855):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0xc0, 0x26, 0x1, 0x0, 0x0, "", [@nested={0xb0, 0x0, 0x0, 0x1, [@generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d"]}]}, 0xc0}], 0x1}, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"})
r1 = syz_open_pts(r0, 0x141601)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x5, 0x17, 0x1, 0x4, 0x1, "48a3452958bb0731809e65dbaeb8f591e03aa6"})
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)

22.563432354s ago: executing program 7 (id=856):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
mbind(&(0x7f0000651000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x5, 0x4, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)

22.562998614s ago: executing program 35 (id=856):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
mbind(&(0x7f0000651000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x5, 0x4, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)

21.840486511s ago: executing program 5 (id=868):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@init_itable}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000980)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000500)='./bus\x00', 0x800, 0x102)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae65ddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff402000000000000006ee6afaaf755a3f6a00400", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400", [0x8000000000]})
write$selinux_create(r0, &(0x7f00000008c0)=@objname={'system_u:object_r:auditd_var_run_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x80, 0x20, './file3\x00'}, 0x53)

21.63249317s ago: executing program 5 (id=873):
fspick(0xffffffffffffffff, 0x0, 0x1)
readv(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==")
r0 = open(&(0x7f0000000300)='./file1\x00', 0x1cd27e, 0x2c)
fallocate(r0, 0x0, 0x0, 0x1001f0)
fallocate(r0, 0x3, 0x0, 0x10000)

21.097167988s ago: executing program 5 (id=883):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0)
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00')

21.097067008s ago: executing program 36 (id=883):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0)
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00')

1.239372225s ago: executing program 9 (id=1566):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}})

1.129562895s ago: executing program 9 (id=1571):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x103040, 0x0)
lstat(&(0x7f0000000380)='./file1\x00', &(0x7f0000000400))

698.283953ms ago: executing program 9 (id=1573):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10)
setitimer(0x2, 0x0, 0x0)

636.947952ms ago: executing program 9 (id=1575):
r0 = socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0})
r1 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1})
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r1})

628.333473ms ago: executing program 8 (id=1577):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x44000)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000100)={&(0x7f0000000300), 0x0})
r2 = dup3(r0, r1, 0x0)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000000), &(0x7f0000002e40)=""/4086, 0xff6})

603.196363ms ago: executing program 8 (id=1578):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

551.299342ms ago: executing program 9 (id=1579):
mlockall(0x7)
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
munlockall()
lseek(0xffffffffffffffff, 0x0, 0x3)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000000), 0x0, 0x4)

486.689232ms ago: executing program 1 (id=1583):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
personality(0x400000b)

482.745042ms ago: executing program 8 (id=1584):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(0xffffffffffffffff, &(0x7f00000006c0)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x3}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x3fffff28}, {"a0"}}}}}}}, 0x3b)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

450.682452ms ago: executing program 9 (id=1585):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

405.047892ms ago: executing program 1 (id=1586):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0)

404.563052ms ago: executing program 8 (id=1587):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003b40)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0xf1, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x62, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)

404.247582ms ago: executing program 4 (id=1588):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x14)
fallocate(r1, 0x0, 0xd2ba, 0x5)
fallocate(r0, 0x0, 0x0, 0x6)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0x7e})

384.605182ms ago: executing program 6 (id=1589):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)

364.206632ms ago: executing program 8 (id=1590):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r2, &(0x7f0000000280)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xe65, 0x3a, '\x05.\xa12\x05\x8f\x14}N\xc7]d\xe3\x84\xd7(EE\x10\x89\x92\xb4\x8f\x9d\x1f\x86n\xcc\xbb\xeb1f\xa4\xf3h\x06E\xc5\xe6O\xed\x96&\x1aCs*\xcd\xfe\xe8i9\xceLy\xad\xe3j\x915\x1e\x89\x05q\xedf \xae\x8cv)r\xef;67;6\xb4\x8c\xb4\xcb\xdbk\x0ej\x7f', 0x3a, 'syz1', 0x3a, './file0', 0x3a, [0x46]}, 0x83)

290.933381ms ago: executing program 1 (id=1591):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x11000000}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

290.382641ms ago: executing program 6 (id=1601):
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x80a, &(0x7f00000003c0), 0x1, 0x796, &(0x7f0000000c40)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
r0 = memfd_create(&(0x7f0000000380)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xb6\xe2\v', 0x0)
write$binfmt_script(r0, &(0x7f0000000600)={'#! ', './file0/../file0'}, 0x14)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

289.889461ms ago: executing program 1 (id=1602):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mount(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, 0x18c7c80, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)

275.362181ms ago: executing program 8 (id=1592):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x81f42)
syz_usb_disconnect(r1)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0)

250.347601ms ago: executing program 4 (id=1593):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000000000000000000000000ce850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7)

194.204431ms ago: executing program 1 (id=1594):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000d80)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@utf8no}, {@utf8}, {@numtail}, {@numtail}, {}, {@shortname_lower}, {@uni_xlateno}, {@shortname_win95}, {@shortname_lower}, {@shortname_lower}, {@shortname_lower}, {@fat=@check_strict}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x203}}]}, 0x1, 0x363, &(0x7f0000000280)="$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")
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

193.964001ms ago: executing program 6 (id=1595):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)

193.784861ms ago: executing program 4 (id=1596):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x41)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'})

168.206031ms ago: executing program 4 (id=1597):
r0 = socket$kcm(0x10, 0x100000000002, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)

116.253701ms ago: executing program 4 (id=1598):
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
close(r0)

94.98694ms ago: executing program 6 (id=1599):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
accept(0xffffffffffffffff, 0x0, 0x0)

41.15739ms ago: executing program 4 (id=1600):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d)

40.88959ms ago: executing program 6 (id=1603):
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0xf0, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_FRAME={0xb5, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xd}, @device_b, @device_b, @random="d3ad8dad9c29", {0xe, 0x81}}, 0xffff, @default, 0x1000, @val, @void, @void, @val={0x4, 0x6, {0x4, 0x7, 0x4, 0x9}}, @val={0x6, 0x2, 0x9}, @void, @val={0x25, 0x3, {0x0, 0x1, 0xfb}}, @void, @val={0x3c, 0x4, {0x1, 0x2, 0xae, 0x8}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xd3, 0x8, 0x16, 0x101}}, [{0xdd, 0x62, "86282c4ff8213b6a4689dd669473add659606c71015c015fc550383d0a44874e79e40b5eb83061b84626709dfbc33216da5429a82ab38e228c6c9acd5b37d99dff026c0370d507725b4a0f9bb6ee95c3fd44f56077b2295384517643fc4fa95ba2fa"}]}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4800}, 0x8010)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$inet6(0xa, 0x3, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffffffffffc, 0x0, 0x0, 0x9, 0x40000000000205}, {}, 0x7ff, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@rand_addr=0x64010102, 0x0, 0x1, 0x3, 0x0, 0x9075}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

24.01685ms ago: executing program 6 (id=1604):
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
r2 = dup3(r0, r1, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0))

0s ago: executing program 1 (id=1605):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "5d362ced", "bc3a20b10f4ad11e"}, 0x38)
pselect6(0x40, &(0x7f0000000100)={0xe, 0x40007ff, 0x3, 0x577, 0x80000007, 0x0, 0x3, 0xffffffff}, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

_fill_super: get root inode failed
[   42.330155][   T40] bridge_slave_1: left allmulticast mode
[   42.335840][   T40] bridge_slave_1: left promiscuous mode
[   42.341629][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.350289][   T40] bridge_slave_0: left allmulticast mode
[   42.356007][   T40] bridge_slave_0: left promiscuous mode
[   42.361713][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.437773][ T4547] loop4: detected capacity change from 0 to 1024
[   42.459367][ T4547] EXT4-fs: Ignoring removed orlov option
[   42.482649][ T4547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.569468][   T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   42.586909][   T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   42.603701][   T40] bond0 (unregistering): Released all slaves
[   42.629390][ T4535] IPv6: Can't replace route, no match found
[   42.672916][   T40] hsr_slave_0: left promiscuous mode
[   42.686645][   T40] hsr_slave_1: left promiscuous mode
[   42.702228][   T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   42.709814][   T40] batman_adv: batadv0: Removing interface: batadv_slave_0
[   42.725233][   T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   42.732841][   T40] batman_adv: batadv0: Removing interface: batadv_slave_1
[   42.746504][   T40] veth1_macvtap: left promiscuous mode
[   42.752115][   T40] veth0_macvtap: left promiscuous mode
[   42.757737][   T40] veth1_vlan: left promiscuous mode
[   42.763098][   T40] veth0_vlan: left promiscuous mode
[   42.890599][   T40] team0 (unregistering): Port device team_slave_1 removed
[   42.901039][   T40] team0 (unregistering): Port device team_slave_0 removed
[   42.993330][ T4595] 9pnet: p9_errstr2errno: server reported unknown error �1 g;-�~	
[   43.039272][ T4601] loop2: detected capacity change from 0 to 764
[   43.052944][ T4601] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   43.096583][ T4604] netdevsim netdevsim1 netdevsim0: Unsupported IPsec algorithm
[   43.125398][ T4310] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   43.168348][ T4617] netlink: 'syz.1.325': attribute type 15 has an invalid length.
[   43.176416][ T4310] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   43.188623][ T4310] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   43.197808][ T4310] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   43.314523][ T4310] 8021q: adding VLAN 0 to HW filter on device bond0
[   43.336340][ T4633] loop1: detected capacity change from 0 to 164
[   43.350314][ T4633] rock: corrupted directory entry. extent=28, offset=0, size=16777216
[   43.360001][ T4310] 8021q: adding VLAN 0 to HW filter on device team0
[   43.386290][ T1448] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.393436][ T1448] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.414783][ T4633] rock: corrupted directory entry. extent=28, offset=0, size=16777216
[   43.436956][ T4310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   43.447474][ T4310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   43.463846][ T1448] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.470994][ T1448] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.487791][ T4633] iso9660: Corrupted directory entry in block 4 of inode 1792
[   43.526132][ T4310] 8021q: adding VLAN 0 to HW filter on device batadv0
[   43.578609][ T4641] loop2: detected capacity change from 0 to 512
[   43.611272][ T4641] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix.
[   43.636130][ T4641] EXT4-fs (loop2): mount failed
[   43.706368][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.751558][ T4667] xt_hashlimit: max too large, truncated to 1048576
[   43.783171][ T4310] veth0_vlan: entered promiscuous mode
[   43.792757][ T4310] veth1_vlan: entered promiscuous mode
[   43.812429][ T4310] veth0_macvtap: entered promiscuous mode
[   43.828796][ T4310] veth1_macvtap: entered promiscuous mode
[   43.851844][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   43.862405][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.872291][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   43.882791][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.892644][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   43.903257][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.913157][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   43.923747][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.938812][ T4310] batman_adv: batadv0: Interface activated: batadv_slave_0
[   43.950011][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   43.960548][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.970470][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   43.981001][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.991015][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   44.001460][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.011324][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   44.021826][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.034112][ T4310] batman_adv: batadv0: Interface activated: batadv_slave_1
[   44.045012][ T4310] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   44.053834][ T4310] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   44.062752][ T4310] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   44.071587][ T4310] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   44.095442][ T4687] serio: Serial port ptm0
[   44.219225][ T4702] xt_HMARK: spi-set and port-set can't be combined
[   44.257564][ T4713] random: crng reseeded on system resumption
[   44.442778][ T4728] wireguard0: entered promiscuous mode
[   44.448420][ T4728] wireguard0: entered allmulticast mode
[   44.538618][ T4746] dccp_v6_rcv: dropped packet with invalid checksum
[   44.800147][ T4781] bpf_get_probe_write_proto: 2 callbacks suppressed
[   44.800165][ T4781] syz.6.379[4781] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   44.808107][ T4781] syz.6.379[4781] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   44.819922][ T4781] syz.6.379[4781] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   44.977496][ T4800] loop2: detected capacity change from 0 to 512
[   45.010766][ T4800] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   45.040408][ T4800] EXT4-fs (loop2): 1 truncate cleaned up
[   45.052187][ T4803] loop4: detected capacity change from 0 to 1764
[   45.055351][ T4800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.095779][ T4809] loop5: detected capacity change from 0 to 128
[   45.103327][ T4809] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   45.115910][ T4809] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   45.141080][ T4800] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.391: corrupted in-inode xattr: overlapping e_value 
[   45.159929][ T4800] EXT4-fs (loop2): Remounting filesystem read-only
[   45.166513][ T4800] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1772: inode #15: comm syz.2.391: unable to update i_inline_off
[   45.178972][ T4800] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   45.224655][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.238127][ T4813] netlink: 'syz.4.396': attribute type 1 has an invalid length.
[   45.323382][ T4821] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   45.337332][ T4823] /dev/loop2: Can't open blockdev
[   45.524751][ T4843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.410'.
[   45.541120][ T4848] syz.4.412[4848] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   45.541244][ T4848] syz.4.412[4848] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   45.558532][ T4848] syz.4.412[4848] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   45.581829][ T4848] loop4: detected capacity change from 0 to 512
[   45.614522][ T4848] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   45.639158][ T4848] EXT4-fs (loop4): 1 truncate cleaned up
[   45.645639][ T4848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.718778][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.837802][ T4873] netlink: 'syz.1.425': attribute type 1 has an invalid length.
[   45.845471][ T4873] netlink: 224 bytes leftover after parsing attributes in process `syz.1.425'.
[   45.868192][ T4879] loop5: detected capacity change from 0 to 512
[   45.920673][ T4885] loop2: detected capacity change from 0 to 256
[   45.930309][ T4885] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   45.936723][ T4879] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.955638][ T4879] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   45.976900][ T4885] FAT-fs (loop2): Directory bread(block 64) failed
[   45.983569][ T4885] FAT-fs (loop2): Directory bread(block 65) failed
[   45.996736][ T4885] FAT-fs (loop2): Directory bread(block 66) failed
[   46.003340][ T4885] FAT-fs (loop2): Directory bread(block 67) failed
[   46.013959][ T4885] FAT-fs (loop2): Directory bread(block 68) failed
[   46.032964][ T4885] FAT-fs (loop2): Directory bread(block 69) failed
[   46.061464][ T4184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.066035][ T4885] FAT-fs (loop2): Directory bread(block 70) failed
[   46.083374][ T4896] netlink: 28 bytes leftover after parsing attributes in process `syz.6.431'.
[   46.096036][ T4885] FAT-fs (loop2): Directory bread(block 71) failed
[   46.106355][ T4885] FAT-fs (loop2): Directory bread(block 72) failed
[   46.119809][ T4885] FAT-fs (loop2): Directory bread(block 73) failed
[   46.192645][ T4896] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   46.269132][ T4915] loop5: detected capacity change from 0 to 512
[   46.288845][ T4915] EXT4-fs: Ignoring removed i_version option
[   46.294874][ T4915] EXT4-fs: Ignoring removed nobh option
[   46.316516][ T4915] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   46.344194][ T4921] IPv6: NLM_F_CREATE should be specified when creating new route
[   46.352535][ T4915] EXT4-fs (loop5): 1 truncate cleaned up
[   46.361015][ T4915] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.420237][ T4184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.444928][ T4931] loop6: detected capacity change from 0 to 1024
[   46.471562][ T4931] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.479897][ T4933] loop5: detected capacity change from 0 to 1024
[   46.499414][ T4933] EXT4-fs (loop5): stripe (8) is not aligned with cluster size (16), stripe is disabled
[   46.529110][ T4937] loop2: detected capacity change from 0 to 2048
[   46.535796][ T4937] EXT4-fs: Ignoring removed i_version option
[   46.549736][ T4933] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.573060][ T4937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.615293][ T4310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.629856][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.652026][ T4184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.763099][ T4961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.457'.
[   46.772223][ T4961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.457'.
[   46.836849][   T29] kauditd_printk_skb: 201 callbacks suppressed
[   46.836864][   T29] audit: type=1400 audit(1734565374.396:787): avc:  denied  { mount } for  pid=4970 comm="syz.2.462" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   46.937659][   T29] audit: type=1400 audit(1734565374.496:788): avc:  denied  { create } for  pid=4977 comm="syz.5.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   46.959340][   T29] audit: type=1400 audit(1734565374.496:789): avc:  denied  { create } for  pid=4984 comm="syz.2.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   46.978890][   T29] audit: type=1400 audit(1734565374.516:790): avc:  denied  { setopt } for  pid=4977 comm="syz.5.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   47.011146][   T29] audit: type=1400 audit(1734565374.556:791): avc:  denied  { write } for  pid=4984 comm="syz.2.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   47.028383][ T4989] syz.2.470[4989] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   47.032669][ T4989] syz.2.470[4989] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   47.050157][ T4989] syz.2.470[4989] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   47.065809][   T29] audit: type=1400 audit(1734565374.626:792): avc:  denied  { append } for  pid=4988 comm="syz.2.470" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   47.130132][ T5000] syz.4.472[5000] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   47.133061][ T5000] loop4: detected capacity change from 0 to 128
[   47.303220][ T5012] loop1: detected capacity change from 0 to 2048
[   47.312356][   T29] audit: type=1326 audit(1734565374.856:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5013 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5007865d29 code=0x7ffc0000
[   47.335847][   T29] audit: type=1326 audit(1734565374.866:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5013 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5007865d29 code=0x7ffc0000
[   47.359148][   T29] audit: type=1326 audit(1734565374.866:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5013 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5007865d29 code=0x7ffc0000
[   47.391599][   T29] audit: type=1326 audit(1734565374.946:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5013 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5007865d29 code=0x7ffc0000
[   47.416977][ T5012]  loop1: p3 < > p4 < >
[   47.421235][ T5012] loop1: partition table partially beyond EOD, truncated
[   47.428431][ T5012] loop1: p3 start 4284289 is beyond EOD, truncated
[   47.447622][ T5019] bond1: entered promiscuous mode
[   47.452690][ T5019] bond1: entered allmulticast mode
[   47.466309][ T5019] 8021q: adding VLAN 0 to HW filter on device bond1
[   47.477989][ T5019] bond1 (unregistering): Released all slaves
[   47.497240][ T3000]  loop1: p3 < > p4 < >
[   47.501425][ T3000] loop1: partition table partially beyond EOD, truncated
[   47.529210][ T3000] loop1: p3 start 4284289 is beyond EOD, truncated
[   47.559533][ T5028] SELinux: syz.1.484 (5028) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   47.593375][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   47.669035][ T5041] syz.6.487: attempt to access beyond end of device
[   47.669035][ T5041] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[   47.712154][ T5046] SELinux:  policydb version 0 does not match my version range 15-33
[   47.729266][ T5046] SELinux: failed to load policy
[   47.813485][ T5058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.494'.
[   47.872418][ T5067] loop1: detected capacity change from 0 to 512
[   47.897752][ T5067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.911116][ T5067] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   47.942977][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.974877][ T5080] hub 9-0:1.0: USB hub found
[   47.981973][ T5080] hub 9-0:1.0: 8 ports detected
[   48.235754][ T5112] netlink: 'syz.5.516': attribute type 4 has an invalid length.
[   48.278463][ T5112] netlink: 'syz.5.516': attribute type 4 has an invalid length.
[   48.301874][ T5118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.519'.
[   48.336914][ T5124] loop4: detected capacity change from 0 to 2048
[   48.347255][ T5124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.366189][ T5124] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   48.398411][ T5106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.407927][ T5106] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.423461][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.618267][ T5174] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0
[   48.618389][ T5173] IPVS: stopping master sync thread 5174 ...
[   48.682733][ T5179] loop2: detected capacity change from 0 to 512
[   48.697483][ T5179] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   48.733477][ T5191] loop1: detected capacity change from 0 to 512
[   48.744655][ T5179] EXT4-fs (loop2): 1 truncate cleaned up
[   48.761825][ T5179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.790823][ T5191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.803462][ T5191] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.863973][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.873663][ T5209] atomic_op ffff88811b869128 conn xmit_atomic 0000000000000000
[   48.896653][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.996430][ T5220] smc: net device bond0 applied user defined pnetid SYZ0
[   49.008222][ T5220] smc: net device bond0 erased user defined pnetid SYZ0
[   49.118552][ T5243] netlink: 'syz.1.556': attribute type 6 has an invalid length.
[   49.316100][ T5279] 9pnet: p9_errstr2errno: server reported unknown error 184467
[   49.414218][ T5293] loop2: detected capacity change from 0 to 256
[   49.455459][ T5293] FAT-fs (loop2): Directory bread(block 64) failed
[   49.463630][ T5293] FAT-fs (loop2): Directory bread(block 65) failed
[   49.476217][ T5293] FAT-fs (loop2): Directory bread(block 66) failed
[   49.482920][ T5293] FAT-fs (loop2): Directory bread(block 67) failed
[   49.492703][ T5293] FAT-fs (loop2): Directory bread(block 68) failed
[   49.499427][ T5293] FAT-fs (loop2): Directory bread(block 69) failed
[   49.517886][ T5293] FAT-fs (loop2): Directory bread(block 70) failed
[   49.524995][ T5311] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[   49.536002][ T5293] FAT-fs (loop2): Directory bread(block 71) failed
[   49.536596][ T5311] SELinux: failed to load policy
[   49.542566][ T5293] FAT-fs (loop2): Directory bread(block 72) failed
[   49.568497][ T5293] FAT-fs (loop2): Directory bread(block 73) failed
[   49.614751][ T5293] syz.2.580: attempt to access beyond end of device
[   49.614751][ T5293] loop2: rw=0, sector=1816, nr_sectors = 4 limit=256
[   49.631983][ T5293] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 326)
[   49.640355][ T5293] FAT-fs (loop2): Filesystem has been set read-only
[   49.647029][ T5293] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 326)
[   49.723037][ T5321] netlink: 133492 bytes leftover after parsing attributes in process `syz.5.592'.
[   49.784973][ T5337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.600'.
[   49.845013][ T5347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.600'.
[   50.085537][ T5389] smc: net device bond0 applied user defined pnetid SYZ0
[   50.103735][ T5389] smc: net device bond0 erased user defined pnetid SYZ0
[   50.148200][ T5398] loop4: detected capacity change from 0 to 512
[   50.161474][ T5398] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   50.188820][ T5398] EXT4-fs (loop4): 1 truncate cleaned up
[   50.198615][ T5398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.253916][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.340252][ T5416] syz.2.630 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   50.417521][ T5427] loop2: detected capacity change from 0 to 512
[   50.428049][ T5427] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.636: iget: bad extended attribute block 1
[   50.441404][ T5427] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.636: couldn't read orphan inode 15 (err -117)
[   50.460838][ T5427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.478225][ T5427] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[   50.506939][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.676831][ T5457] loop1: detected capacity change from 0 to 512
[   50.693447][ T5457] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   50.716633][ T5463] loop4: detected capacity change from 0 to 1024
[   50.720402][ T5457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.730123][ T5463] EXT4-fs error (device loop4): ext4_quota_enable:7108: comm syz.4.653: Bad quota inum: 9, type: 2
[   50.737416][ T5457] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.746367][ T5463] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix.
[   50.771659][ T5463] EXT4-fs (loop4): mount failed
[   50.894061][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.011434][ T5501] netlink: 'syz.1.665': attribute type 1 has an invalid length.
[   51.113671][ T5517] __nla_validate_parse: 1 callbacks suppressed
[   51.113685][ T5517] netlink: 16 bytes leftover after parsing attributes in process `syz.5.672'.
[   51.128833][ T5517] netlink: 16 bytes leftover after parsing attributes in process `syz.5.672'.
[   51.137734][ T5517] netlink: 16 bytes leftover after parsing attributes in process `syz.5.672'.
[   51.156103][ T5523] xt_CT: You must specify a L4 protocol and not use inversions on it
[   51.171177][ T5517] netlink: 16 bytes leftover after parsing attributes in process `syz.5.672'.
[   51.180141][ T5517] netlink: 16 bytes leftover after parsing attributes in process `syz.5.672'.
[   51.189118][ T5517] netlink: 16 bytes leftover after parsing attributes in process `syz.5.672'.
[   51.201601][ T5528] SELinux: security_context_str_to_sid (u) failed with errno=-22
[   51.245111][ T5517] netlink: 16 bytes leftover after parsing attributes in process `syz.5.672'.
[   51.254291][ T5517] netlink: 16 bytes leftover after parsing attributes in process `syz.5.672'.
[   51.263273][ T5517] netlink: 16 bytes leftover after parsing attributes in process `syz.5.672'.
[   51.398040][ T5557] 9pnet_fd: Insufficient options for proto=fd
[   51.463806][ T5566] loop5: detected capacity change from 0 to 128
[   51.490624][ T5566] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   51.514728][ T5566] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   51.549109][ T4184] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   51.874348][   T29] kauditd_printk_skb: 332 callbacks suppressed
[   51.874444][   T29] audit: type=1400 audit(1734565379.426:1129): avc:  denied  { execute } for  pid=5608 comm="syz.1.696" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=12321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   51.907511][ T5605] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   51.977400][   T29] audit: type=1326 audit(1734565379.486:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5604 comm="syz.5.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a57725d29 code=0x7ffc0000
[   52.000841][   T29] audit: type=1326 audit(1734565379.486:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5604 comm="syz.5.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a57725d29 code=0x7ffc0000
[   52.024253][   T29] audit: type=1326 audit(1734565379.486:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5604 comm="syz.5.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a57725d29 code=0x7ffc0000
[   52.047754][   T29] audit: type=1326 audit(1734565379.486:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5604 comm="syz.5.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a57725d29 code=0x7ffc0000
[   52.071190][   T29] audit: type=1326 audit(1734565379.486:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5604 comm="syz.5.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f2a57725d29 code=0x7ffc0000
[   52.094427][   T29] audit: type=1400 audit(1734565379.486:1135): avc:  denied  { setattr } for  pid=5604 comm="syz.5.698" name="TIPC" dev="sockfs" ino=11846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   52.117316][   T29] audit: type=1326 audit(1734565379.486:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5604 comm="syz.5.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a57725d29 code=0x7ffc0000
[   52.140704][   T29] audit: type=1400 audit(1734565379.506:1137): avc:  denied  { bind } for  pid=5611 comm="syz.4.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   52.159948][   T29] audit: type=1400 audit(1734565379.506:1138): avc:  denied  { name_bind } for  pid=5611 comm="syz.4.700" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   52.588564][ T5685] bpf_get_probe_write_proto: 5 callbacks suppressed
[   52.588582][ T5685] syz.2.720[5685] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   52.624395][ T5685] syz.2.720[5685] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   52.666290][ T5685] syz.2.720[5685] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   52.717636][ T5696] netlink: 24 bytes leftover after parsing attributes in process `syz.2.721'.
[   52.815604][ T5704] loop2: detected capacity change from 0 to 1024
[   52.842506][ T5706] SELinux:  Context system_u:object_r:wireless_device_t:s0 is not valid (left unmapped).
[   52.876975][ T5704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.016079][ T5704] loop2: detected capacity change from 1024 to 64
[   53.038669][ T5727] EXT4-fs error (device loop2): ext4_xattr_ibody_get:653: inode #18: comm syz.2.722: corrupted in-inode xattr: bad magic number in in-inode xattr
[   53.099494][ T5727] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #18: comm syz.2.722: corrupted in-inode xattr: bad magic number in in-inode xattr
[   53.157198][ T3309] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /204/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=1024 fake=0
[   53.190619][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.204663][ T5710] kmmpd-loop2: attempt to access beyond end of device
[   53.204663][ T5710] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[   53.218263][ T5710] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[   53.233138][ T3309] bond0: (slave syz_tun): Releasing backup interface
[   53.324390][ T4350] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.370807][ T5756] Invalid ELF header magic: != ELF
[   53.391150][ T4350] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.482094][ T4350] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.558733][ T4350] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.702395][ T4350] bridge_slave_1: left allmulticast mode
[   53.708109][ T4350] bridge_slave_1: left promiscuous mode
[   53.713901][ T4350] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.743121][ T5815] loop1: detected capacity change from 0 to 1024
[   53.750043][ T4350] bridge_slave_0: left allmulticast mode
[   53.755903][ T4350] bridge_slave_0: left promiscuous mode
[   53.761750][ T4350] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.786616][ T5815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.877725][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.949018][ T5825] loop5: detected capacity change from 0 to 512
[   53.958318][ T4350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   53.968460][ T4350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   53.968548][ T5825] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.989687][ T5825] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.001008][ T4350] bond0 (unregistering): Released all slaves
[   54.022771][ T5823] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[   54.032512][ T4184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.032714][ T5823] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[   54.054845][ T4350] hsr_slave_0: left promiscuous mode
[   54.060862][ T4350] hsr_slave_1: left promiscuous mode
[   54.066971][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.074570][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_0
[   54.082564][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.090386][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_1
[   54.099999][ T4350] veth1_macvtap: left promiscuous mode
[   54.105599][ T4350] veth0_macvtap: left promiscuous mode
[   54.111164][ T4350] veth1_vlan: left promiscuous mode
[   54.116776][ T4350] veth0_vlan: left promiscuous mode
[   54.169586][ T5836] SELinux:  Context system_u:object_r:fonts_t:s0 is not valid (left unmapped).
[   54.183814][ T4350] team0 (unregistering): Port device team_slave_1 removed
[   54.195268][ T4350] team0 (unregistering): Port device team_slave_0 removed
[   54.227711][ T5840] usb usb1: usbfs: process 5840 (syz.5.758) did not claim interface 8 before use
[   54.348888][ T5856] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5856 comm=syz.5.762
[   54.361325][ T5856] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5856 comm=syz.5.762
[   54.378209][ T5777] chnl_net:caif_netlink_parms(): no params data found
[   54.396400][ T5862] loop1: detected capacity change from 0 to 512
[   54.408328][ T5862] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.764: corrupted in-inode xattr: invalid ea_ino
[   54.422120][ T5862] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.764: couldn't read orphan inode 15 (err -117)
[   54.438047][ T5862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.505443][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.512561][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.524582][ T5777] bridge_slave_0: entered allmulticast mode
[   54.531322][ T5777] bridge_slave_0: entered promiscuous mode
[   54.538330][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.547845][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.554921][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.562181][ T5777] bridge_slave_1: entered allmulticast mode
[   54.568788][ T5777] bridge_slave_1: entered promiscuous mode
[   54.589211][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.600570][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.631892][ T5777] team0: Port device team_slave_0 added
[   54.642893][ T5894] loop1: detected capacity change from 0 to 1024
[   54.650694][ T5894] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   54.656647][ T5777] team0: Port device team_slave_1 added
[   54.683411][ T5894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.706646][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.708569][ T5894] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.1.772: corrupted in-inode xattr: bad magic number in in-inode xattr
[   54.713612][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.755396][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.768823][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.775844][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.801853][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.816958][ T5909] batman_adv: batadv0: Adding interface: macsec1
[   54.823356][ T5909] batman_adv: batadv0: The MTU of interface macsec1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.848866][ T5909] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active
[   54.887136][ T5777] hsr_slave_0: entered promiscuous mode
[   54.895008][ T5777] hsr_slave_1: entered promiscuous mode
[   54.901933][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.913734][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.922165][ T5777] Cannot create hsr debugfs directory
[   54.945512][ T5925] loop1: detected capacity change from 0 to 256
[   55.043551][ T5777] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   55.057495][ T5777] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   55.087644][ T5777] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   55.097967][ T5777] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   55.129319][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.136462][ T5777] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.143724][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.150818][ T5777] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.202703][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.224707][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.242822][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.258017][ T5777] 8021q: adding VLAN 0 to HW filter on device team0
[   55.272165][ T4350] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.279481][ T4350] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.291380][ T4350] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.298477][ T4350] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.454291][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.683700][ T6016] loop1: detected capacity change from 0 to 2048
[   55.709346][ T6023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   55.719848][ T6023] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   55.763838][ T6016] Alternate GPT is invalid, using primary GPT.
[   55.770260][ T6016]  loop1: p2 p3 p7
[   55.772666][ T5777] veth0_vlan: entered promiscuous mode
[   55.805353][ T5777] veth1_vlan: entered promiscuous mode
[   55.825619][ T5777] veth0_macvtap: entered promiscuous mode
[   55.835739][ T5777] veth1_macvtap: entered promiscuous mode
[   55.841918][ T6034] tls_set_device_offload: netdev not found
[   55.864336][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.874830][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.884693][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.895141][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.905251][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.915751][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.925717][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.936167][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.949803][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.960427][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.970955][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.980790][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.991222][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.001060][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.012243][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.022321][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.032835][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.046385][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.059338][ T5777] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.068114][ T5777] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.076873][ T5777] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.085745][ T5777] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.184896][ T6060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.195825][ T6060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.218890][ T6063] __nla_validate_parse: 2 callbacks suppressed
[   56.218903][ T6063] netlink: 28 bytes leftover after parsing attributes in process `syz.1.805'.
[   56.253750][ T6069] sd 0:0:1:0: device reset
[   56.449314][ T6096] loop4: detected capacity change from 0 to 512
[   56.456878][ T6096] EXT4-fs: Ignoring removed oldalloc option
[   56.467310][ T6096] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   56.489489][ T6096] EXT4-fs (loop4): 1 truncate cleaned up
[   56.495664][ T6096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.514870][ T3375] kernel write not supported for file /uhid (pid: 3375 comm: kworker/0:4)
[   56.560728][ T6109] IPv6: Can't replace route, no match found
[   56.592486][ T6111] sd 0:0:1:0: device reset
[   56.628602][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.641574][ T6117] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[   56.650979][ T6118] loop6: detected capacity change from 0 to 2048
[   56.676178][ T6120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.822'.
[   56.685726][ T6122] netlink: 3 bytes leftover after parsing attributes in process `syz.7.826'.
[   56.697849][ T6122] 0�X���: renamed from caif0
[   56.708261][ T6122] 0�X���: entered allmulticast mode
[   56.713554][ T6122] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[   56.739742][ T6130] syz.4.828[6130] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   56.742850][ T6118] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.765181][ T6125] netlink: 44 bytes leftover after parsing attributes in process `syz.1.825'.
[   56.777767][ T6132] sd 0:0:1:0: device reset
[   56.797945][ T6134] loop7: detected capacity change from 0 to 1024
[   56.814379][ T6137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.823498][ T6137] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.832093][ T4310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.842496][ T6134] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.919262][ T6146] loop6: detected capacity change from 0 to 256
[   56.956232][ T6134] loop7: detected capacity change from 1024 to 64
[   56.963280][ T6147] EXT4-fs error (device loop7): ext4_xattr_ibody_get:653: inode #18: comm syz.7.839: corrupted in-inode xattr: bad magic number in in-inode xattr
[   56.980762][ T6147] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #18: comm syz.7.839: corrupted in-inode xattr: bad magic number in in-inode xattr
[   57.017824][ T5777] EXT4-fs error (device loop7): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /12/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=1024 fake=0
[   57.063111][   T29] kauditd_printk_skb: 231 callbacks suppressed
[   57.063128][   T29] audit: type=1326 audit(1734565384.616:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6148 comm="syz.4.835" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb05aa15d29 code=0x0
[   57.064223][ T5777] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.102800][ T6141] kmmpd-loop7: attempt to access beyond end of device
[   57.102800][ T6141] loop7: rw=14337, sector=128, nr_sectors = 2 limit=64
[   57.116367][ T6141] Buffer I/O error on dev loop7, logical block 64, lost sync page write
[   57.399130][ T6160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.407639][ T6160] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.495076][   T29] audit: type=1326 audit(1734565385.046:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.5.841" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a57725d29 code=0x0
[   57.629246][   T29] audit: type=1326 audit(1734565385.186:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6167 comm="syz.5.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a57725d29 code=0x7ffc0000
[   57.653743][   T29] audit: type=1326 audit(1734565385.186:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6167 comm="syz.5.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a57725d29 code=0x7ffc0000
[   57.677241][   T29] audit: type=1326 audit(1734565385.186:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6167 comm="syz.5.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f2a57725d29 code=0x7ffc0000
[   57.700672][   T29] audit: type=1326 audit(1734565385.186:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6167 comm="syz.5.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a57725d29 code=0x7ffc0000
[   57.724024][   T29] audit: type=1326 audit(1734565385.186:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6167 comm="syz.5.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a57725d29 code=0x7ffc0000
[   57.748233][ T6172] sd 0:0:1:0: device reset
[   57.748373][   T29] audit: type=1326 audit(1734565385.316:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6169 comm="syz.5.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a57725d29 code=0x7ffc0000
[   57.776109][   T29] audit: type=1326 audit(1734565385.316:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6169 comm="syz.5.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a57725d29 code=0x7ffc0000
[   57.799593][   T29] audit: type=1326 audit(1734565385.316:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6169 comm="syz.5.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a57725d29 code=0x7ffc0000
[   57.875361][ T6180] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[   57.900490][ T6183] syz.1.860[6183] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   57.900548][ T6183] syz.1.860[6183] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   57.912175][ T6183] syz.1.860[6183] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   57.928625][ T6183] loop1: detected capacity change from 0 to 128
[   57.965247][ T6186] SELinux: syz.6.862 (6186) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   58.304540][ T6205] loop1: detected capacity change from 0 to 1024
[   58.329082][ T6205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.336244][ T6207] loop4: detected capacity change from 0 to 2048
[   58.396866][ T6207]  loop4: p3 < > p4 < >
[   58.401096][ T6207] loop4: partition table partially beyond EOD, truncated
[   58.409100][ T6207] loop4: p3 start 4284289 is beyond EOD, truncated
[   58.410007][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.466689][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   58.475209][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   58.503199][ T6210] chnl_net:caif_netlink_parms(): no params data found
[   58.560222][ T6210] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.568057][ T6210] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.575596][ T6210] bridge_slave_0: entered allmulticast mode
[   58.581997][ T6210] bridge_slave_0: entered promiscuous mode
[   58.588676][ T6210] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.595733][ T6210] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.603113][ T6210] bridge_slave_1: entered allmulticast mode
[   58.609728][ T6210] bridge_slave_1: entered promiscuous mode
[   58.625085][ T6210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.635437][ T6210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.654396][ T6210] team0: Port device team_slave_0 added
[   58.661009][ T6210] team0: Port device team_slave_1 added
[   58.676484][ T6210] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.683504][ T6210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.709578][ T6210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.720909][ T6210] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.727999][ T6210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.753978][ T6210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.778141][ T6210] hsr_slave_0: entered promiscuous mode
[   58.784097][ T6210] hsr_slave_1: entered promiscuous mode
[   58.790158][ T6210] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.797735][ T6210] Cannot create hsr debugfs directory
[   58.853443][ T6210] netdevsim netdevsim8 netdevsim0: renamed from eth0
[   58.861812][ T6210] netdevsim netdevsim8 netdevsim1: renamed from eth1
[   58.871026][ T6210] netdevsim netdevsim8 netdevsim2: renamed from eth2
[   58.880017][ T6210] netdevsim netdevsim8 netdevsim3: renamed from eth3
[   58.893184][ T6210] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.900396][ T6210] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.907640][ T6210] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.914710][ T6210] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.942274][ T6210] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.953821][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.962140][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.973985][ T6210] 8021q: adding VLAN 0 to HW filter on device team0
[   58.983639][   T55] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.990756][   T55] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.000636][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.007809][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.053219][ T6238] loop5: detected capacity change from 0 to 1024
[   59.090649][ T6210] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.107553][ T6238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.177610][ T6238] loop5: detected capacity change from 1024 to 64
[   59.190099][ T6238] EXT4-fs error (device loop5): ext4_xattr_ibody_get:653: inode #18: comm syz.5.868: corrupted in-inode xattr: bad magic number in in-inode xattr
[   59.220755][ T6238] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #18: comm syz.5.868: corrupted in-inode xattr: bad magic number in in-inode xattr
[   59.247806][ T4184] EXT4-fs error (device loop5): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /120/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=1024 fake=0
[   59.263855][ T6210] veth0_vlan: entered promiscuous mode
[   59.275788][ T6210] veth1_vlan: entered promiscuous mode
[   59.302392][ T5885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.313135][ T6245] kmmpd-loop5: attempt to access beyond end of device
[   59.313135][ T6245] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[   59.320801][ T6268] loop6: detected capacity change from 0 to 1024
[   59.326737][ T6245] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[   59.338523][ T6210] veth0_macvtap: entered promiscuous mode
[   59.348642][ T6268] EXT4-fs error (device loop6): ext4_quota_enable:7108: comm syz.6.874: Bad quota inum: 9, type: 2
[   59.360009][ T6268] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix.
[   59.375249][ T6268] EXT4-fs (loop6): mount failed
[   59.389476][ T6210] veth1_macvtap: entered promiscuous mode
[   59.412445][ T6210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.414478][ T6275] loop6: detected capacity change from 0 to 512
[   59.422952][ T6210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.422964][ T6210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.422977][ T6210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.459492][ T6210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.469639][ T6275] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   59.469952][ T6210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.488238][ T6210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.497547][ T6275] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.498665][ T6210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.498679][ T6210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.498691][ T6210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.500153][ T6210] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.518482][ T6275] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.522056][ T6210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.569448][ T6210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.579304][ T6210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.589863][ T6210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.599722][ T6210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.610161][ T6210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.619998][ T6210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.630430][ T6210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.640358][ T6210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.650831][ T6210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.661582][ T6210] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.676570][ T6210] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.677479][ T4310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.685288][ T6210] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.702980][ T6210] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.711752][ T6210] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.828512][ T6293] loop4: detected capacity change from 0 to 512
[   59.839169][ T6293] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.885: iget: bad extended attribute block 1
[   59.872583][ T6293] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.885: couldn't read orphan inode 15 (err -117)
[   59.886352][ T6293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.916251][ T6293] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[   59.988459][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.047417][ T6294] chnl_net:caif_netlink_parms(): no params data found
[   60.100170][ T6323] loop8: detected capacity change from 0 to 2048
[   60.120247][ T6294] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.127495][ T6294] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.134847][ T6294] bridge_slave_0: entered allmulticast mode
[   60.141492][ T6294] bridge_slave_0: entered promiscuous mode
[   60.148366][ T6294] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.155532][ T6294] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.162896][ T6294] bridge_slave_1: entered allmulticast mode
[   60.169508][ T6294] bridge_slave_1: entered promiscuous mode
[   60.188460][ T6294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.199914][ T6294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.234395][ T6294] team0: Port device team_slave_0 added
[   60.245649][ T6294] team0: Port device team_slave_1 added
[   60.251690][ T6337] smc: net device bond0 applied user defined pnetid SYZ0
[   60.266375][ T6337] smc: net device bond0 erased user defined pnetid SYZ0
[   60.282160][ T6294] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.289170][ T6294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.315235][ T6294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.338059][ T6343] loop1: detected capacity change from 0 to 1024
[   60.347806][ T6294] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.354836][ T6294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.376601][ T6343] EXT4-fs error (device loop1): ext4_quota_enable:7108: comm syz.1.901: Bad quota inum: 9, type: 2
[   60.380830][ T6294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.394294][ T6343] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix.
[   60.417162][ T6343] EXT4-fs (loop1): mount failed
[   60.430726][ T6294] hsr_slave_0: entered promiscuous mode
[   60.439805][ T6294] hsr_slave_1: entered promiscuous mode
[   60.445761][ T6294] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.453569][ T6294] Cannot create hsr debugfs directory
[   60.526337][ T6355] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[   60.542858][ T6294] netdevsim netdevsim9 netdevsim0: renamed from eth0
[   60.552697][ T6294] netdevsim netdevsim9 netdevsim1: renamed from eth1
[   60.562068][ T6294] netdevsim netdevsim9 netdevsim2: renamed from eth2
[   60.571371][ T6294] netdevsim netdevsim9 netdevsim3: renamed from eth3
[   60.587382][ T6294] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.594563][ T6294] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.601980][ T6294] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.609067][ T6294] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.658171][ T6294] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.679322][ T1448] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.688621][ T1448] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.699900][ T6294] 8021q: adding VLAN 0 to HW filter on device team0
[   60.708957][ T1448] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.716075][ T1448] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.730760][ T1448] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.737841][ T1448] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.778943][ T6294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   60.855104][ T6294] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.876060][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.6.915'.
[   60.896954][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.6.915'.
[   60.998267][ T6294] veth0_vlan: entered promiscuous mode
[   61.007760][ T6402] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[   61.019263][ T6294] veth1_vlan: entered promiscuous mode
[   61.037359][ T6294] veth0_macvtap: entered promiscuous mode
[   61.044744][ T6294] veth1_macvtap: entered promiscuous mode
[   61.058756][ T6294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.069246][ T6294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.079128][ T6294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.089620][ T6294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.099475][ T6294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.109898][ T6294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.119801][ T6294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.130870][ T6294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.140898][ T6294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.151345][ T6294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.161257][ T6294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.171812][ T6294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.182744][ T6294] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.191275][ T6294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.201807][ T6294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.211688][ T6294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.222140][ T6294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.232029][ T6294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.242615][ T6294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.252447][ T6294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.262862][ T6294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.272907][ T6294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.283356][ T6294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.293191][ T6294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.303658][ T6294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.314069][ T6294] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.330825][ T6294] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.339630][ T6294] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.348556][ T6294] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.358893][ T6294] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.396808][ T6404] loop6: detected capacity change from 0 to 1024
[   61.405609][ T6404] EXT4-fs: Ignoring removed orlov option
[   61.513196][ T6421] loop1: detected capacity change from 0 to 512
[   61.531990][ T6421] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.924: iget: bad extended attribute block 1
[   61.570281][ T6421] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.924: couldn't read orphan inode 15 (err -117)
[   61.588498][ T6421] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[   61.626324][ T6432] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[   61.635323][ T6432] SELinux: failed to load policy
[   61.787886][ T6443] 9pnet: p9_errstr2errno: server reported unknown error 184467
[   61.999574][ T6467] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[   62.007116][ T6471] loop9: detected capacity change from 0 to 1024
[   62.011461][ T6470] loop1: detected capacity change from 0 to 512
[   62.021943][ T6470] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   62.049331][ T6470] EXT4-fs (loop1): 1 truncate cleaned up
[   62.070304][   T29] kauditd_printk_skb: 144 callbacks suppressed
[   62.070317][   T29] audit: type=1400 audit(1734565389.626:1524): avc:  denied  { remove_name } for  pid=6468 comm="+}[@" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   62.098862][   T29] audit: type=1400 audit(1734565389.626:1525): avc:  denied  { unlink } for  pid=6468 comm="+}[@" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   62.295012][   T29] audit: type=1400 audit(1734565389.846:1526): avc:  denied  { create } for  pid=6483 comm="syz.8.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   62.314713][   T29] audit: type=1400 audit(1734565389.846:1527): avc:  denied  { ioctl } for  pid=6483 comm="syz.8.952" path="socket:[15662]" dev="sockfs" ino=15662 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   62.372956][ T6471] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   62.381732][ T6489] loop4: detected capacity change from 0 to 512
[   62.398867][ T6471] EXT4-fs (loop9): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28
[   62.411755][ T6471] EXT4-fs (loop9): This should not happen!! Data will be lost
[   62.411755][ T6471] 
[   62.421823][ T6471] EXT4-fs (loop9): Total free blocks count 0
[   62.427964][ T6471] EXT4-fs (loop9): Free/Dirty block details
[   62.433884][ T6471] EXT4-fs (loop9): free_blocks=68451041280
[   62.439745][ T6471] EXT4-fs (loop9): dirty_blocks=16
[   62.444871][ T6471] EXT4-fs (loop9): Block reservation details
[   62.450969][ T6471] EXT4-fs (loop9): i_reserved_data_blocks=1
[   62.457031][   T29] audit: type=1400 audit(1734565389.996:1528): avc:  denied  { watch watch_reads } for  pid=6495 comm="syz.1.959" path="/242" dev="tmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   62.482808][ T6494] netlink: 'syz.6.955': attribute type 6 has an invalid length.
[   62.490878][ T6489] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   62.510385][   T29] audit: type=1400 audit(1734565390.066:1529): avc:  denied  { name_bind } for  pid=6491 comm="syz.8.957" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   62.532254][   T29] audit: type=1400 audit(1734565390.066:1530): avc:  denied  { node_bind } for  pid=6491 comm="syz.8.957" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   62.552256][ T6501] loop6: detected capacity change from 0 to 512
[   62.570396][   T29] audit: type=1400 audit(1734565390.126:1531): avc:  denied  { create } for  pid=6497 comm="syz.1.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   62.591161][   T29] audit: type=1400 audit(1734565390.126:1532): avc:  denied  { write } for  pid=6497 comm="syz.1.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   62.599575][ T6471] syz.9.948 (6471) used greatest stack depth: 9320 bytes left
[   62.620508][ T6501] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   62.640351][ T6489] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.657612][ T6501] EXT4-fs (loop6): 1 truncate cleaned up
[   62.658308][   T29] audit: type=1400 audit(1734565390.216:1533): avc:  denied  { read } for  pid=6502 comm="syz.8.962" dev="nsfs" ino=4026532382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   62.685505][ T6503] smc: net device bond0 applied user defined pnetid SYZ0
[   62.692920][ T6503] smc: net device bond0 erased user defined pnetid SYZ0
[   62.743480][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.974'.
[   62.800442][ T6523] loop4: detected capacity change from 0 to 512
[   62.828803][ T6523] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.898681][ T6536] loop6: detected capacity change from 0 to 2048
[   62.923867][ T6536] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   62.940318][ T6543] loop9: detected capacity change from 0 to 512
[   62.948693][ T6543] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[   62.974620][ T6543] EXT4-fs (loop9): 1 truncate cleaned up
[   63.064096][ T6560] atomic_op ffff88810f110d28 conn xmit_atomic 0000000000000000
[   63.184594][ T6574] loop9: detected capacity change from 0 to 2048
[   63.193911][ T6552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   63.212669][ T6552] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   63.234007][ T6574] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   63.344243][ T6586] netlink: 'syz.6.1004': attribute type 4 has an invalid length.
[   63.359675][ T6586] netlink: 'syz.6.1004': attribute type 4 has an invalid length.
[   63.360260][ T6587] bond1: entered promiscuous mode
[   63.372687][ T6587] bond1: entered allmulticast mode
[   63.378319][ T6587] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.387650][ T6587] bond1 (unregistering): Released all slaves
[   63.629101][ T6594] loop8: detected capacity change from 0 to 512
[   63.645611][ T6594] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[   63.662949][ T6594] EXT4-fs (loop8): 1 truncate cleaned up
[   63.681478][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1000'.
[   63.722741][ T6605] block device autoloading is deprecated and will be removed.
[   63.740474][ T6605] syz.4.1002: attempt to access beyond end of device
[   63.740474][ T6605] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[   64.554738][ T6618] syz.8.1017[6618] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   64.554843][ T6618] syz.8.1017[6618] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   64.568898][ T6618] syz.8.1017[6618] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   64.588564][ T6622] syz.1.1011[6622] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   64.600106][ T6622] syz.1.1011[6622] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   64.612157][ T6622] syz.1.1011[6622] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   64.660006][ T6630] syz.6.1023[6630] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   64.690842][ T6630] syz.6.1023[6630] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   64.716508][ T6630] syz.6.1023[6630] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   64.753048][ T6641] loop8: detected capacity change from 0 to 512
[   64.777260][ T6641] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[   64.792860][ T6641] EXT4-fs (loop8): 1 truncate cleaned up
[   64.849269][ T6646] sd 0:0:1:0: device reset
[   64.917375][ T6648] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1021'.
[   64.951241][ T6659] hub 9-0:1.0: USB hub found
[   64.952379][ T6661] loop8: detected capacity change from 0 to 1024
[   64.960988][ T6659] hub 9-0:1.0: 8 ports detected
[   64.987995][ T6667] syz.1.1028: attempt to access beyond end of device
[   64.987995][ T6667] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[   65.033867][ T6671] syz.4.1030[6671] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   65.092742][ T6679] sd 0:0:1:0: device reset
[   65.117843][ T6678] loop6: detected capacity change from 0 to 512
[   65.124726][ T6678] EXT4-fs: Ignoring removed i_version option
[   65.130865][ T6678] EXT4-fs: Ignoring removed nobh option
[   65.139794][ T6678] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   65.140874][ T6684] loop8: detected capacity change from 0 to 512
[   65.156592][ T6684] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[   65.167398][ T6678] EXT4-fs (loop6): 1 truncate cleaned up
[   65.176248][ T6684] EXT4-fs (loop8): 1 truncate cleaned up
[   65.242422][ T6693] loop1: detected capacity change from 0 to 512
[   65.268576][ T6693] ext4 filesystem being mounted at /259/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   65.407798][ T6704] loop4: detected capacity change from 0 to 1024
[   65.514489][ T6712] loop8: detected capacity change from 0 to 512
[   65.532399][ T6714] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1059'.
[   65.555408][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1049'.
[   65.556850][ T6712] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[   65.574600][ T6714] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   65.600551][ T6712] EXT4-fs (loop8): 1 truncate cleaned up
[   65.653506][ T6723] loop1: detected capacity change from 0 to 512
[   65.660482][ T6723] EXT4-fs: Ignoring removed oldalloc option
[   65.668432][ T6723] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   65.697780][ T6725] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1064'.
[   65.723942][ T6725] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   65.730274][ T6723] EXT4-fs (loop1): 1 truncate cleaned up
[   65.832537][ T6744] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   65.879625][ T6748] loop6: detected capacity change from 0 to 1764
[   65.952029][ T6760] loop6: detected capacity change from 0 to 1024
[   66.174926][ T6760] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   66.190340][ T6760] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28
[   66.202719][ T6760] EXT4-fs (loop6): This should not happen!! Data will be lost
[   66.202719][ T6760] 
[   66.212398][ T6760] EXT4-fs (loop6): Total free blocks count 0
[   66.218441][ T6760] EXT4-fs (loop6): Free/Dirty block details
[   66.224337][ T6760] EXT4-fs (loop6): free_blocks=68451041280
[   66.230186][ T6760] EXT4-fs (loop6): dirty_blocks=16
[   66.235311][ T6760] EXT4-fs (loop6): Block reservation details
[   66.241587][ T6760] EXT4-fs (loop6): i_reserved_data_blocks=1
[   66.563189][ T6765] loop9: detected capacity change from 0 to 256
[   66.578047][ T6769] xt_HMARK: spi-set and port-set can't be combined
[   66.600004][ T6765] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   66.641547][ T6765] FAT-fs (loop9): Directory bread(block 64) failed
[   66.657455][ T6765] FAT-fs (loop9): Directory bread(block 65) failed
[   66.664131][ T6765] FAT-fs (loop9): Directory bread(block 66) failed
[   66.671392][ T6765] FAT-fs (loop9): Directory bread(block 67) failed
[   66.678809][ T6765] FAT-fs (loop9): Directory bread(block 68) failed
[   66.686986][ T6765] FAT-fs (loop9): Directory bread(block 69) failed
[   66.694704][ T6765] FAT-fs (loop9): Directory bread(block 70) failed
[   66.704074][ T6765] FAT-fs (loop9): Directory bread(block 71) failed
[   66.708141][ T6776] loop6: detected capacity change from 0 to 512
[   66.712734][ T6765] FAT-fs (loop9): Directory bread(block 72) failed
[   66.724032][ T6765] FAT-fs (loop9): Directory bread(block 73) failed
[   66.730750][ T6775] dccp_v6_rcv: dropped packet with invalid checksum
[   66.731383][ T6776] EXT4-fs: Ignoring removed oldalloc option
[   66.756924][ T6776] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   66.813999][ T6789] loop1: detected capacity change from 0 to 128
[   66.816084][ T6776] EXT4-fs (loop6): 1 truncate cleaned up
[   66.820703][ T6789] vfat: Bad value for 'gid'
[   66.830560][ T6789] vfat: Bad value for 'gid'
[   66.836945][ T6787] netlink: 'syz.8.1077': attribute type 1 has an invalid length.
[   66.844801][ T6787] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1077'.
[   66.878372][ T6793] tmpfs: Bad value for 'nr_blocks'
[   66.924466][ T6797] loop1: detected capacity change from 0 to 1764
[   66.945998][ T6799] /dev/loop4: Can't open blockdev
[   66.982885][ T6806] loop4: detected capacity change from 0 to 128
[   66.989819][ T6806] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   67.003389][ T6806] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   67.072163][ T6814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1090'.
[   67.115265][   T29] kauditd_printk_skb: 133 callbacks suppressed
[   67.115281][   T29] audit: type=1326 audit(1734565394.656:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.1.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9cd15d29 code=0x7ffc0000
[   67.145140][   T29] audit: type=1326 audit(1734565394.656:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.1.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9cd15d29 code=0x7ffc0000
[   67.168615][   T29] audit: type=1326 audit(1734565394.656:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.1.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3b9cd15d29 code=0x7ffc0000
[   67.192526][   T29] audit: type=1326 audit(1734565394.656:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.1.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9cd15d29 code=0x7ffc0000
[   67.216012][   T29] audit: type=1326 audit(1734565394.656:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.1.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9cd15d29 code=0x7ffc0000
[   67.239500][   T29] audit: type=1326 audit(1734565394.656:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.1.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3b9cd15d29 code=0x7ffc0000
[   67.268080][ T6818] loop4: detected capacity change from 0 to 256
[   67.274887][ T6818] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   67.299310][ T6818] FAT-fs (loop4): Directory bread(block 64) failed
[   67.306107][ T6818] FAT-fs (loop4): Directory bread(block 65) failed
[   67.312641][ T6818] FAT-fs (loop4): Directory bread(block 66) failed
[   67.337047][ T6818] FAT-fs (loop4): Directory bread(block 67) failed
[   67.343615][ T6818] FAT-fs (loop4): Directory bread(block 68) failed
[   67.356002][ T6818] FAT-fs (loop4): Directory bread(block 69) failed
[   67.362606][ T6818] FAT-fs (loop4): Directory bread(block 70) failed
[   67.386012][ T6818] FAT-fs (loop4): Directory bread(block 71) failed
[   67.392573][ T6818] FAT-fs (loop4): Directory bread(block 72) failed
[   67.404246][   T29] audit: type=1326 audit(1734565394.966:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.1.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9cd15d29 code=0x7ffc0000
[   67.427718][ T6818] FAT-fs (loop4): Directory bread(block 73) failed
[   67.458224][   T29] audit: type=1326 audit(1734565395.016:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.1.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9cd15d29 code=0x7ffc0000
[   67.506544][   T29] audit: type=1326 audit(1734565395.046:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.1.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f3b9cd15d29 code=0x7ffc0000
[   67.530172][   T29] audit: type=1326 audit(1734565395.046:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.1.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9cd15d29 code=0x7ffc0000
[   67.633675][ T6828] loop4: detected capacity change from 0 to 1024
[   67.772336][ T6838] /dev/loop6: Can't open blockdev
[   67.777102][ T6839] loop9: detected capacity change from 0 to 512
[   67.784342][ T6837] wireguard0: entered promiscuous mode
[   67.786798][ T6839] EXT4-fs: Ignoring removed oldalloc option
[   67.789863][ T6837] wireguard0: entered allmulticast mode
[   67.803523][ T6839] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[   67.820995][ T6839] EXT4-fs (loop9): 1 truncate cleaned up
[   68.027231][ T6847] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1100'.
[   68.058615][ T6847] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   68.090553][ T6828] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   68.109180][ T6828] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28
[   68.121491][ T6828] EXT4-fs (loop4): This should not happen!! Data will be lost
[   68.121491][ T6828] 
[   68.131147][ T6828] EXT4-fs (loop4): Total free blocks count 0
[   68.137318][ T6828] EXT4-fs (loop4): Free/Dirty block details
[   68.143228][ T6828] EXT4-fs (loop4): free_blocks=68451041280
[   68.149119][ T6828] EXT4-fs (loop4): dirty_blocks=16
[   68.154335][ T6828] EXT4-fs (loop4): Block reservation details
[   68.160403][ T6828] EXT4-fs (loop4): i_reserved_data_blocks=1
[   68.192246][ T6856] loop8: detected capacity change from 0 to 128
[   68.211709][ T6856] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   68.251223][ T6856] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   68.451726][ T6883] loop8: detected capacity change from 0 to 256
[   68.460796][ T6883] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   68.477140][ T6885] tmpfs: Bad value for 'nr_blocks'
[   68.481215][ T6883] FAT-fs (loop8): Directory bread(block 64) failed
[   68.489335][ T6883] FAT-fs (loop8): Directory bread(block 65) failed
[   68.497459][ T6883] FAT-fs (loop8): Directory bread(block 66) failed
[   68.504250][ T6883] FAT-fs (loop8): Directory bread(block 67) failed
[   68.511034][ T6883] FAT-fs (loop8): Directory bread(block 68) failed
[   68.518903][ T6883] FAT-fs (loop8): Directory bread(block 69) failed
[   68.525566][ T6883] FAT-fs (loop8): Directory bread(block 70) failed
[   68.532323][ T6883] FAT-fs (loop8): Directory bread(block 71) failed
[   68.540608][ T6883] FAT-fs (loop8): Directory bread(block 72) failed
[   68.547448][ T6883] FAT-fs (loop8): Directory bread(block 73) failed
[   68.595480][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'.
[   68.781617][ T6899] loop8: detected capacity change from 0 to 1024
[   68.973269][ T6899] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   68.991595][ T6899] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28
[   69.004063][ T6899] EXT4-fs (loop8): This should not happen!! Data will be lost
[   69.004063][ T6899] 
[   69.013725][ T6899] EXT4-fs (loop8): Total free blocks count 0
[   69.019740][ T6899] EXT4-fs (loop8): Free/Dirty block details
[   69.025778][ T6899] EXT4-fs (loop8): free_blocks=68451041280
[   69.031610][ T6899] EXT4-fs (loop8): dirty_blocks=16
[   69.036765][ T6899] EXT4-fs (loop8): Block reservation details
[   69.042766][ T6899] EXT4-fs (loop8): i_reserved_data_blocks=1
[   69.159773][ T6210] EXT4-fs unmount: 49 callbacks suppressed
[   69.159789][ T6210] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.224766][ T6912] loop8: detected capacity change from 0 to 512
[   69.234253][ T6912] EXT4-fs: Ignoring removed oldalloc option
[   69.246467][ T6912] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[   69.289815][ T6912] EXT4-fs (loop8): 1 truncate cleaned up
[   69.298584][ T6912] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.328762][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1135'.
[   69.420000][ T6210] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.551810][ T6940] loop9: detected capacity change from 0 to 1024
[   69.567643][ T6940] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.710808][ T6958] netlink: 'syz.4.1149': attribute type 153 has an invalid length.
[   69.738145][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1152'.
[   69.740026][ T6964] loop4: detected capacity change from 0 to 512
[   69.754102][ T6964] EXT4-fs: Ignoring removed oldalloc option
[   69.760452][ T6964] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   69.772126][ T6964] EXT4-fs (loop4): 1 truncate cleaned up
[   69.778087][ T6964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.813844][ T6940] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   69.831425][ T6940] EXT4-fs (loop9): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28
[   69.843838][ T6940] EXT4-fs (loop9): This should not happen!! Data will be lost
[   69.843838][ T6940] 
[   69.853633][ T6940] EXT4-fs (loop9): Total free blocks count 0
[   69.859758][ T6940] EXT4-fs (loop9): Free/Dirty block details
[   69.865808][ T6940] EXT4-fs (loop9): free_blocks=68451041280
[   69.871662][ T6940] EXT4-fs (loop9): dirty_blocks=16
[   69.876797][ T6940] EXT4-fs (loop9): Block reservation details
[   69.882772][ T6940] EXT4-fs (loop9): i_reserved_data_blocks=1
[   69.893045][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.960402][ T6294] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.169081][ T6989] loop1: detected capacity change from 0 to 512
[   70.177254][ T6989] EXT4-fs: Ignoring removed oldalloc option
[   70.186431][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1163'.
[   70.195706][ T6989] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   70.217426][ T6993] loop8: detected capacity change from 0 to 1024
[   70.225339][ T6989] EXT4-fs (loop1): 1 truncate cleaned up
[   70.234873][ T6989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.258764][ T6993] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.296506][ T7006] binfmt_misc: register: failed to install interpreter file ./file0
[   70.417118][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.482756][ T6993] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   70.500313][ T6993] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28
[   70.512651][ T6993] EXT4-fs (loop8): This should not happen!! Data will be lost
[   70.512651][ T6993] 
[   70.522353][ T6993] EXT4-fs (loop8): Total free blocks count 0
[   70.528373][ T6993] EXT4-fs (loop8): Free/Dirty block details
[   70.534361][ T6993] EXT4-fs (loop8): free_blocks=68451041280
[   70.540272][ T6993] EXT4-fs (loop8): dirty_blocks=16
[   70.545395][ T6993] EXT4-fs (loop8): Block reservation details
[   70.551408][ T6993] EXT4-fs (loop8): i_reserved_data_blocks=1
[   70.604384][ T6210] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.625010][ T7024] loop1: detected capacity change from 0 to 512
[   70.633283][ T7023] loop9: detected capacity change from 0 to 1024
[   70.634390][ T7024] EXT4-fs: Ignoring removed oldalloc option
[   70.646762][ T7024] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   70.658292][ T7023] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.668196][ T7024] EXT4-fs (loop1): 1 truncate cleaned up
[   70.676590][ T7024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.761319][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.777150][ T7032] bpf_get_probe_write_proto: 23 callbacks suppressed
[   70.777168][ T7032] syz.6.1179[7032] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   70.784095][ T7032] syz.6.1179[7032] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   70.795748][ T7032] syz.6.1179[7032] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   70.919783][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1182'.
[   70.966550][ T7023] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   70.981618][ T7023] EXT4-fs (loop9): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28
[   70.987367][ T7044] Zero length message leads to an empty skb
[   70.994027][ T7023] EXT4-fs (loop9): This should not happen!! Data will be lost
[   70.994027][ T7023] 
[   71.009731][ T7023] EXT4-fs (loop9): Total free blocks count 0
[   71.015867][ T7023] EXT4-fs (loop9): Free/Dirty block details
[   71.021897][ T7023] EXT4-fs (loop9): free_blocks=68451041280
[   71.027788][ T7023] EXT4-fs (loop9): dirty_blocks=16
[   71.032886][ T7023] EXT4-fs (loop9): Block reservation details
[   71.039027][ T7023] EXT4-fs (loop9): i_reserved_data_blocks=1
[   71.094080][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1189'.
[   71.113328][ T6294] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.124831][ T7052] loop1: detected capacity change from 0 to 512
[   71.131988][ T7052] EXT4-fs: Ignoring removed oldalloc option
[   71.138463][ T7052] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   71.157899][ T7052] EXT4-fs (loop1): 1 truncate cleaned up
[   71.166376][ T7052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.237761][ T7059] loop6: detected capacity change from 0 to 2048
[   71.266801][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.276728][ T7059]  loop6: p1 < > p4
[   71.288528][ T7059] loop6: p4 size 8388608 extends beyond EOD, truncated
[   71.303600][ T7067] loop1: detected capacity change from 0 to 1024
[   71.327047][ T7067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.343888][ T7067] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   71.372276][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.518947][ T7073] loop6: detected capacity change from 0 to 512
[   71.525497][ T7073] EXT4-fs: Ignoring removed oldalloc option
[   71.541358][ T7073] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   71.556953][ T7073] EXT4-fs (loop6): 1 truncate cleaned up
[   71.564258][ T7073] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.581623][ T7085] loop1: detected capacity change from 0 to 1024
[   71.597289][ T7085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.662722][ T4310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.687284][ T7099] loop6: detected capacity change from 0 to 512
[   71.699123][ T7099] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.724331][ T7099] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.753936][ T4310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.847813][ T7085] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   71.862864][ T7085] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28
[   71.875375][ T7085] EXT4-fs (loop1): This should not happen!! Data will be lost
[   71.875375][ T7085] 
[   71.885098][ T7085] EXT4-fs (loop1): Total free blocks count 0
[   71.891101][ T7085] EXT4-fs (loop1): Free/Dirty block details
[   71.897008][ T7085] EXT4-fs (loop1): free_blocks=68451041280
[   71.902836][ T7085] EXT4-fs (loop1): dirty_blocks=16
[   71.908005][ T7085] EXT4-fs (loop1): Block reservation details
[   71.913967][ T7085] EXT4-fs (loop1): i_reserved_data_blocks=1
[   71.961094][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.416442][ T7111] loop6: detected capacity change from 0 to 1024
[   72.428282][ T7114] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1213'.
[   72.445641][ T7111] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.490262][   T29] kauditd_printk_skb: 145 callbacks suppressed
[   72.490278][   T29] audit: type=1400 audit(1734565400.046:1822): avc:  granted  { setsecparam } for  pid=7122 comm="syz.9.1217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[   72.530673][ T7128] loop1: detected capacity change from 0 to 512
[   72.539060][ T7128] EXT4-fs: Ignoring removed oldalloc option
[   72.557320][ T7128] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   72.572353][ T7130] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[   72.590318][   T29] audit: type=1400 audit(1734565400.136:1823): avc:  denied  { write } for  pid=7129 comm="syz.9.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   72.616472][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1221'.
[   72.636202][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1221'.
[   72.662616][ T7128] EXT4-fs (loop1): 1 truncate cleaned up
[   72.683773][ T7128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.755433][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.779337][   T29] audit: type=1400 audit(1734565400.326:1824): avc:  denied  { setopt } for  pid=7147 comm="syz.1.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   72.799103][   T29] audit: type=1400 audit(1734565400.336:1825): avc:  denied  { ioctl } for  pid=7145 comm="syz.8.1229" path="socket:[17676]" dev="sockfs" ino=17676 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   72.827429][ T7146] syz_tun: entered promiscuous mode
[   72.835246][ T7146] syz_tun: left promiscuous mode
[   72.888999][ T7111] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   72.905311][ T7111] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28
[   72.917815][ T7111] EXT4-fs (loop6): This should not happen!! Data will be lost
[   72.917815][ T7111] 
[   72.927562][ T7111] EXT4-fs (loop6): Total free blocks count 0
[   72.933555][ T7111] EXT4-fs (loop6): Free/Dirty block details
[   72.939524][ T7111] EXT4-fs (loop6): free_blocks=68451041280
[   72.939800][   T29] audit: type=1326 audit(1734565400.466:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.1.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9cd15d29 code=0x7ffc0000
[   72.945402][ T7111] EXT4-fs (loop6): dirty_blocks=16
[   72.945415][ T7111] EXT4-fs (loop6): Block reservation details
[   72.945426][ T7111] EXT4-fs (loop6): i_reserved_data_blocks=1
[   72.949211][ T7154] SELinux:  Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped).
[   72.968961][   T29] audit: type=1326 audit(1734565400.466:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.1.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3b9cd15d29 code=0x7ffc0000
[   73.018635][   T29] audit: type=1326 audit(1734565400.486:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.1.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9cd15d29 code=0x7ffc0000
[   73.042040][   T29] audit: type=1326 audit(1734565400.486:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.1.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9cd15d29 code=0x7ffc0000
[   73.065610][   T29] audit: type=1326 audit(1734565400.486:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.1.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f3b9cd15d29 code=0x7ffc0000
[   73.089077][   T29] audit: type=1326 audit(1734565400.486:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.1.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9cd15d29 code=0x7ffc0000
[   73.122519][ T4310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.261504][ T7165] loop8: detected capacity change from 0 to 2048
[   73.283440][ T7171] loop1: detected capacity change from 0 to 512
[   73.288287][ T7165] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.291668][ T7171] EXT4-fs: Ignoring removed oldalloc option
[   73.308281][ T7171] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   73.319854][ T7171] EXT4-fs (loop1): 1 truncate cleaned up
[   73.325816][ T7171] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.384980][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.400752][ T6210] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.467718][ T7185] loop8: detected capacity change from 0 to 1024
[   73.483778][ T7185] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.648515][ T7201] loop1: detected capacity change from 0 to 512
[   73.657564][ T7201] EXT4-fs: Ignoring removed oldalloc option
[   73.664758][ T7201] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   73.689108][ T7201] EXT4-fs (loop1): 1 truncate cleaned up
[   73.706338][ T7201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.753262][ T7185] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   73.769580][ T7185] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28
[   73.781908][ T7185] EXT4-fs (loop8): This should not happen!! Data will be lost
[   73.781908][ T7185] 
[   73.791600][ T7185] EXT4-fs (loop8): Total free blocks count 0
[   73.797615][ T7185] EXT4-fs (loop8): Free/Dirty block details
[   73.803632][ T7185] EXT4-fs (loop8): free_blocks=68451041280
[   73.809550][ T7185] EXT4-fs (loop8): dirty_blocks=16
[   73.814689][ T7185] EXT4-fs (loop8): Block reservation details
[   73.820730][ T7185] EXT4-fs (loop8): i_reserved_data_blocks=1
[   73.827900][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.893887][ T6210] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.912748][ T7215] x_tables: duplicate underflow at hook 2
[   74.025945][ T7236] loop1: detected capacity change from 0 to 512
[   74.032947][ T7236] EXT4-fs: Ignoring removed oldalloc option
[   74.039549][ T7236] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   74.051800][ T7236] EXT4-fs (loop1): 1 truncate cleaned up
[   74.066481][ T7236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.138919][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.200699][ T7266] loop6: detected capacity change from 0 to 128
[   74.289362][ T7275] loop6: detected capacity change from 0 to 2048
[   74.297709][ T7279] __nla_validate_parse: 2 callbacks suppressed
[   74.297724][ T7279] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1281'.
[   74.312960][ T7279] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1281'.
[   74.338604][ T7275] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.384707][ T7275] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 102 with max blocks 1 with error 28
[   74.397212][ T7275] EXT4-fs (loop6): This should not happen!! Data will be lost
[   74.397212][ T7275] 
[   74.406863][ T7275] EXT4-fs (loop6): Total free blocks count 0
[   74.412841][ T7275] EXT4-fs (loop6): Free/Dirty block details
[   74.418822][ T7275] EXT4-fs (loop6): free_blocks=0
[   74.423820][ T7275] EXT4-fs (loop6): dirty_blocks=0
[   74.429144][ T7275] EXT4-fs (loop6): Block reservation details
[   74.435286][ T7275] EXT4-fs (loop6): i_reserved_data_blocks=0
[   74.456772][ T4310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.527110][ T7310] loop6: detected capacity change from 0 to 4096
[   74.546957][ T7310] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.577512][ T4310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.752321][ T7334] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1305'.
[   74.841134][ T7343] xt_CT: You must specify a L4 protocol and not use inversions on it
[   74.870134][ T7342] xt_time: unknown flags 0xc
[   74.952699][ T7355] batadv_slave_1: entered promiscuous mode
[   74.959182][ T7354] batadv_slave_1: left promiscuous mode
[   75.105031][ T7375] netlink: 'syz.1.1323': attribute type 6 has an invalid length.
[   75.304816][ T7403] netlink: 188 bytes leftover after parsing attributes in process `syz.9.1336'.
[   75.383410][ T7411] Cannot find add_set index 0 as target
[   75.435163][ T7421] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1343'.
[   75.444169][ T7421] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1343'.
[   75.457747][ T7419] loop8: detected capacity change from 0 to 2048
[   75.467086][ T7421] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1343'.
[   75.515838][ T7425] loop1: detected capacity change from 0 to 512
[   75.530325][ T7430] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   75.539171][ T7419] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.560955][ T7425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.562181][ T7434] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1348'.
[   75.581990][ T7425] ext4 filesystem being mounted at /347/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   75.604633][ T7437] loop9: detected capacity change from 0 to 512
[   75.611470][ T7437] EXT4-fs: Ignoring removed oldalloc option
[   75.630881][ T7419] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 102 with max blocks 1 with error 28
[   75.640888][ T7425] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #18: comm syz.1.1345: corrupted inode contents
[   75.643337][ T7419] EXT4-fs (loop8): This should not happen!! Data will be lost
[   75.643337][ T7419] 
[   75.662361][ T7441] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.1351'.
[   75.664786][ T7419] EXT4-fs (loop8): Total free blocks count 0
[   75.680328][ T7419] EXT4-fs (loop8): Free/Dirty block details
[   75.685219][ T7437] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   75.686305][ T7419] EXT4-fs (loop8): free_blocks=0
[   75.699946][ T7419] EXT4-fs (loop8): dirty_blocks=0
[   75.701700][ T7425] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #18: comm syz.1.1345: mark_inode_dirty error
[   75.704979][ T7419] EXT4-fs (loop8): Block reservation details
[   75.717901][ T7425] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #18: comm syz.1.1345: corrupted inode contents
[   75.722259][ T7419] EXT4-fs (loop8): i_reserved_data_blocks=0
[   75.741062][ T7425] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3006: inode #18: comm syz.1.1345: mark_inode_dirty error
[   75.741729][ T7443] loop6: detected capacity change from 0 to 1024
[   75.753610][ T7425] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3009: inode #18: comm syz.1.1345: mark inode dirty (error -117)
[   75.772883][ T7443] EXT4-fs: Ignoring removed nobh option
[   75.773969][ T7437] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   75.778530][ T7443] EXT4-fs: Ignoring removed orlov option
[   75.778851][ T7425] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117)
[   75.791187][ T7437] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.825411][ T7443] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.841897][ T6294] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   75.842263][ T6210] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.862468][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.892396][ T7449] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO
[   75.940270][ T4310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.067288][ T7472] loop9: detected capacity change from 0 to 8192
[   76.091368][ T7482] loop6: detected capacity change from 0 to 2048
[   76.121950][ T7482] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.170373][ T4310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.229794][ T7498] SELinux:  Context � is not valid (left unmapped).
[   76.276432][ T7500] vhci_hcd: invalid port number 223
[   76.281701][ T7500] vhci_hcd: default hub control req: b3c8 v6b02 i00df l109
[   76.377212][ T7511] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[   76.398827][ T7513] loop6: detected capacity change from 0 to 164
[   76.406690][ T7513] iso9660: Corrupted directory entry in block 4 of inode 1792
[   76.568680][ T7523] loop6: detected capacity change from 0 to 128
[   76.575374][ T7523] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   76.587338][ T7523] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   76.817896][ T7532] SELinux:  policydb table sizes (0,0) do not match mine (6,7)
[   76.848602][ T7532] SELinux: failed to load policy
[   76.895420][ T7544] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[   76.929693][ T7552] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   76.937644][ T7554] capability: warning: `syz.1.1400' uses deprecated v2 capabilities in a way that may be insecure
[   77.079100][ T7584] loop4: detected capacity change from 0 to 256
[   77.130330][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1418'.
[   77.296739][ T7624] xt_TPROXY: Can be used only with -p tcp or -p udp
[   77.355548][ T7621] loop9: detected capacity change from 0 to 8192
[   77.386831][ T7633] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   77.394155][ T7633] IPv6: NLM_F_CREATE should be set when creating new route
[   77.401565][ T7633] IPv6: NLM_F_CREATE should be set when creating new route
[   77.472009][ T7645] 9pnet: p9_errstr2errno: server reported unknown error �@��hQI���te}u���~=
[   77.488219][ T7649] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22
[   77.496478][ T7649] netdevsim netdevsim8: Direct firmware load for . failed with error -22
[   77.521795][ T7651] xt_hashlimit: max too large, truncated to 1048576
[   77.568714][ T7663] netem: unknown loss type 13
[   77.573452][ T7663] netem: change failed
[   77.732217][ T7696] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   77.796292][   T29] kauditd_printk_skb: 210 callbacks suppressed
[   77.796356][   T29] audit: type=1400 audit(1734565405.356:2042): avc:  denied  { connect } for  pid=7708 comm="syz.4.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   77.851729][   T29] audit: type=1326 audit(1734565405.406:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7718 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05aa15d29 code=0x7ffc0000
[   77.881237][   T29] audit: type=1326 audit(1734565405.406:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7718 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb05aa15d29 code=0x7ffc0000
[   77.904690][   T29] audit: type=1326 audit(1734565405.406:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7718 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05aa15d29 code=0x7ffc0000
[   77.928157][   T29] audit: type=1326 audit(1734565405.406:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7718 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05aa15d29 code=0x7ffc0000
[   77.951696][   T29] audit: type=1326 audit(1734565405.406:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7718 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb05aa15d29 code=0x7ffc0000
[   77.975130][   T29] audit: type=1326 audit(1734565405.406:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7718 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05aa15d29 code=0x7ffc0000
[   77.998749][   T29] audit: type=1326 audit(1734565405.406:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7718 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05aa15d29 code=0x7ffc0000
[   78.012835][ T7727] syz.8.1479[7727] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   78.022186][   T29] audit: type=1326 audit(1734565405.406:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7718 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb05aa15d29 code=0x7ffc0000
[   78.034946][ T7727] syz.8.1479[7727] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   78.057246][   T29] audit: type=1326 audit(1734565405.436:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7718 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05aa15d29 code=0x7ffc0000
[   78.092543][ T7727] syz.8.1479[7727] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   78.206102][ T7744] Falling back ldisc for ttyS3.
[   78.391546][ T7786] loop8: detected capacity change from 0 to 512
[   78.416498][ T7786] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.429292][ T7786] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   78.447448][ T7795] loop9: detected capacity change from 0 to 128
[   78.455040][ T7786] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #18: comm syz.8.1503: corrupted inode contents
[   78.468469][ T7786] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #18: comm syz.8.1503: mark_inode_dirty error
[   78.500401][ T7786] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #18: comm syz.8.1503: corrupted inode contents
[   78.571828][ T7786] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3006: inode #18: comm syz.8.1503: mark_inode_dirty error
[   78.598568][ T7786] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3009: inode #18: comm syz.8.1503: mark inode dirty (error -117)
[   78.612879][ T7786] EXT4-fs warning (device loop8): ext4_evict_inode:276: xattr delete (err -117)
[   78.659784][ T6210] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.691975][    C0] hrtimer: interrupt took 35855 ns
[   78.792547][ T7837] loop9: detected capacity change from 0 to 512
[   78.799466][ T7837] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[   78.812134][ T7837] EXT4-fs (loop9): 1 truncate cleaned up
[   78.823063][ T7837] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.846109][ T7837] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.912047][ T7855] loop8: detected capacity change from 0 to 2048
[   78.947574][ T7859] loop6: detected capacity change from 0 to 1024
[   78.953043][ T7861] loop4: detected capacity change from 0 to 2048
[   78.954310][ T7859] EXT4-fs: Ignoring removed nomblk_io_submit option
[   78.967586][ T7859] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   78.990622][ T7859] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854e01c, mo2=0003]
[   79.000217][ T7859] System zones: 0-1, 3-36
[   79.009677][ T7870] loop9: detected capacity change from 0 to 512
[   79.017667][ T7859] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.036826][ T7861]  loop4: p1 p2 p3
[   79.046193][ T7855] Alternate GPT is invalid, using primary GPT.
[   79.052463][ T7855]  loop8: p2 p3 p7
[   79.114626][ T4310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.124338][ T7882] loop4: detected capacity change from 0 to 128
[   79.145734][ T7884] serio: Serial port ptm0
[   79.150485][ T7882] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   79.164106][ T7882] ext4 filesystem being mounted at /307/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   79.194827][ T7892] syz.6.1550[7892] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   79.194968][ T7892] syz.6.1550[7892] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   79.206505][ T7892] syz.6.1550[7892] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   79.238484][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   79.259359][ T7896] loop1: detected capacity change from 0 to 1024
[   79.266080][ T7896] EXT4-fs: Ignoring removed orlov option
[   79.279791][ T7900] syz.9.1562[7900] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   79.279850][ T7900] syz.9.1562[7900] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   79.283595][ T7896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.291781][ T7900] syz.9.1562[7900] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   79.333683][ T7902] loop6: detected capacity change from 0 to 256
[   79.351832][ T7902] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   79.381525][ T7902] FAT-fs (loop6): Directory bread(block 64) failed
[   79.388444][ T7902] FAT-fs (loop6): Directory bread(block 65) failed
[   79.395065][ T7902] FAT-fs (loop6): Directory bread(block 66) failed
[   79.402681][ T7902] FAT-fs (loop6): Directory bread(block 67) failed
[   79.410639][ T7902] FAT-fs (loop6): Directory bread(block 68) failed
[   79.431299][ T7902] FAT-fs (loop6): Directory bread(block 69) failed
[   79.438000][ T7902] FAT-fs (loop6): Directory bread(block 70) failed
[   79.444895][ T7902] FAT-fs (loop6): Directory bread(block 71) failed
[   79.452536][ T7902] FAT-fs (loop6): Directory bread(block 72) failed
[   79.459266][ T7902] FAT-fs (loop6): Directory bread(block 73) failed
[   79.468277][ T7908] wireguard0: entered promiscuous mode
[   79.473860][ T7908] wireguard0: entered allmulticast mode
[   79.592661][ T7924] __nla_validate_parse: 7 callbacks suppressed
[   79.592675][ T7924] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1564'.
[   79.697848][ T7909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.706996][ T7909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.709495][ T7935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.723413][ T7935] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.180676][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.217379][ T7947] loop1: detected capacity change from 0 to 256
[   80.224065][ T7947] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   80.243995][ T7947] FAT-fs (loop1): Directory bread(block 64) failed
[   80.246090][ T7951] wireguard0: entered promiscuous mode
[   80.251207][ T7947] FAT-fs (loop1): Directory bread(block 65) failed
[   80.256082][ T7951] wireguard0: entered allmulticast mode
[   80.269007][ T7947] FAT-fs (loop1): Directory bread(block 66) failed
[   80.276458][ T7947] FAT-fs (loop1): Directory bread(block 67) failed
[   80.283731][ T7947] FAT-fs (loop1): Directory bread(block 68) failed
[   80.290459][ T7947] FAT-fs (loop1): Directory bread(block 69) failed
[   80.297140][ T7947] FAT-fs (loop1): Directory bread(block 70) failed
[   80.303939][ T7947] FAT-fs (loop1): Directory bread(block 71) failed
[   80.310611][ T7947] FAT-fs (loop1): Directory bread(block 72) failed
[   80.317235][ T7947] FAT-fs (loop1): Directory bread(block 73) failed
[   80.444755][ T7973] loop9: detected capacity change from 0 to 1024
[   80.454497][ T7975] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1587'.
[   80.456630][ T7973] EXT4-fs: Ignoring removed orlov option
[   80.475190][ T7973] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.489728][ T7978] loop4: detected capacity change from 0 to 128
[   80.519522][ T7981] netlink: '+}[@': attribute type 3 has an invalid length.
[   80.547899][ T7983] binfmt_misc: register: failed to install interpreter file ./file0
[   80.552415][ T7978] ext4 filesystem being mounted at /312/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   80.615443][ T7990] loop6: detected capacity change from 0 to 2048
[   80.641797][ T7990] EXT4-fs error (device loop6): ext4_find_extent:938: inode #2: comm syz.6.1601: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   80.678634][ T7999] loop1: detected capacity change from 0 to 256
[   80.686465][ T7999] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   80.712388][ T7999] FAT-fs (loop1): Directory bread(block 64) failed
[   80.719645][ T7999] FAT-fs (loop1): Directory bread(block 65) failed
[   80.726535][ T7999] FAT-fs (loop1): Directory bread(block 66) failed
[   80.733132][ T7999] FAT-fs (loop1): Directory bread(block 67) failed
[   80.739784][ T7999] FAT-fs (loop1): Directory bread(block 68) failed
[   80.756098][ T7999] FAT-fs (loop1): Directory bread(block 69) failed
[   80.763433][ T7999] FAT-fs (loop1): Directory bread(block 70) failed
[   80.770396][ T7999] FAT-fs (loop1): Directory bread(block 71) failed
[   80.780954][ T7999] FAT-fs (loop1): Directory bread(block 72) failed
[   80.787599][ T7999] FAT-fs (loop1): Directory bread(block 73) failed
[   80.814992][ T8011] wireguard0: entered promiscuous mode
[   80.820623][ T8011] wireguard0: entered allmulticast mode
[   80.826558][ T7992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.835104][ T7992] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.936523][ T7987] ==================================================================
[   80.944637][ T7987] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked
[   80.951848][ T7987] 
[   80.954175][ T7987] write to 0xffff888116d3bd24 of 4 bytes by task 7973 on cpu 0:
[   80.961819][ T7987]  __xa_set_mark+0x182/0x1b0
[   80.966430][ T7987]  __folio_mark_dirty+0x3b5/0x4e0
[   80.971476][ T7987]  mark_buffer_dirty+0x134/0x230
[   80.976428][ T7987]  block_write_end+0x123/0x210
[   80.981207][ T7987]  ext4_write_end+0x148/0x770
[   80.985901][ T7987]  generic_perform_write+0x33c/0x4a0
[   80.991215][ T7987]  ext4_buffered_write_iter+0x1ea/0x370
[   80.996782][ T7987]  ext4_file_write_iter+0x383/0xf20
[   81.002022][ T7987]  iter_file_splice_write+0x5f1/0x980
[   81.007410][ T7987]  direct_splice_actor+0x160/0x2c0
[   81.012533][ T7987]  splice_direct_to_actor+0x302/0x670
[   81.017917][ T7987]  do_splice_direct+0xd7/0x150
[   81.022693][ T7987]  do_sendfile+0x398/0x660
[   81.027124][ T7987]  __x64_sys_sendfile64+0x110/0x150
[   81.032351][ T7987]  x64_sys_call+0xfbd/0x2dc0
[   81.036992][ T7987]  do_syscall_64+0xc9/0x1c0
[   81.041508][ T7987]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.047777][ T7987] 
[   81.050113][ T7987] read to 0xffff888116d3bd24 of 4 bytes by task 7987 on cpu 1:
[   81.057784][ T7987]  xas_find_marked+0x60a/0x660
[   81.062566][ T7987]  find_get_entry+0x54/0x390
[   81.067176][ T7987]  filemap_get_folios_tag+0x9e/0x210
[   81.072478][ T7987]  file_write_and_wait_range+0x204/0x2f0
[   81.078124][ T7987]  generic_buffers_fsync_noflush+0x46/0x120
[   81.084042][ T7987]  ext4_sync_file+0x1ff/0x6c0
[   81.088743][ T7987]  vfs_fsync_range+0x116/0x130
[   81.093540][ T7987]  ext4_buffered_write_iter+0x326/0x370
[   81.099108][ T7987]  ext4_file_write_iter+0x383/0xf20
[   81.104330][ T7987]  iter_file_splice_write+0x5f1/0x980
[   81.109714][ T7987]  direct_splice_actor+0x160/0x2c0
[   81.114834][ T7987]  splice_direct_to_actor+0x302/0x670
[   81.120229][ T7987]  do_splice_direct+0xd7/0x150
[   81.125004][ T7987]  do_sendfile+0x398/0x660
[   81.129425][ T7987]  __x64_sys_sendfile64+0x110/0x150
[   81.134648][ T7987]  x64_sys_call+0xfbd/0x2dc0
[   81.139251][ T7987]  do_syscall_64+0xc9/0x1c0
[   81.143773][ T7987]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.149695][ T7987] 
[   81.152017][ T7987] value changed: 0x04000021 -> 0x0e000021
[   81.157823][ T7987] 
[   81.160175][ T7987] Reported by Kernel Concurrency Sanitizer on:
[   81.166355][ T7987] CPU: 1 UID: 0 PID: 7987 Comm: syz.9.1585 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0
[   81.177048][ T7987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[   81.187129][ T7987] ==================================================================
[   81.233046][ T7973] ==================================================================
[   81.241157][ T7973] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark
[   81.249153][ T7973] 
[   81.251480][ T7973] write to 0xffff888116d3bd24 of 4 bytes by task 7987 on cpu 0:
[   81.259291][ T7973]  xas_set_mark+0x131/0x150
[   81.263811][ T7973]  tag_pages_for_writeback+0xa5/0x2a0
[   81.269217][ T7973]  ext4_do_writepages+0x694/0x2130
[   81.274357][ T7973]  ext4_writepages+0x159/0x2e0
[   81.279140][ T7973]  do_writepages+0x1d8/0x480
[   81.283765][ T7973]  file_write_and_wait_range+0x168/0x2f0
[   81.289419][ T7973]  generic_buffers_fsync_noflush+0x46/0x120
[   81.295344][ T7973]  ext4_sync_file+0x1ff/0x6c0
[   81.300052][ T7973]  vfs_fsync_range+0x116/0x130
[   81.304842][ T7973]  ext4_buffered_write_iter+0x326/0x370
[   81.310423][ T7973]  ext4_file_write_iter+0x383/0xf20
[   81.315653][ T7973]  iter_file_splice_write+0x5f1/0x980
[   81.321050][ T7973]  direct_splice_actor+0x160/0x2c0
[   81.326187][ T7973]  splice_direct_to_actor+0x302/0x670
[   81.331588][ T7973]  do_splice_direct+0xd7/0x150
[   81.336380][ T7973]  do_sendfile+0x398/0x660
[   81.340814][ T7973]  __x64_sys_sendfile64+0x110/0x150
[   81.346056][ T7973]  x64_sys_call+0xfbd/0x2dc0
[   81.350669][ T7973]  do_syscall_64+0xc9/0x1c0
[   81.355203][ T7973]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.361139][ T7973] 
[   81.363471][ T7973] read to 0xffff888116d3bd24 of 4 bytes by task 7973 on cpu 1:
[   81.371022][ T7973]  file_write_and_wait_range+0x116/0x2f0
[   81.376674][ T7973]  generic_buffers_fsync_noflush+0x46/0x120
[   81.382599][ T7973]  ext4_sync_file+0x1ff/0x6c0
[   81.387306][ T7973]  vfs_fsync_range+0x116/0x130
[   81.392098][ T7973]  ext4_buffered_write_iter+0x326/0x370
[   81.397670][ T7973]  ext4_file_write_iter+0x383/0xf20
[   81.402986][ T7973]  iter_file_splice_write+0x5f1/0x980
[   81.408386][ T7973]  direct_splice_actor+0x160/0x2c0
[   81.413535][ T7973]  splice_direct_to_actor+0x302/0x670
[   81.418933][ T7973]  do_splice_direct+0xd7/0x150
[   81.423722][ T7973]  do_sendfile+0x398/0x660
[   81.428153][ T7973]  __x64_sys_sendfile64+0x110/0x150
[   81.433387][ T7973]  x64_sys_call+0xfbd/0x2dc0
[   81.437993][ T7973]  do_syscall_64+0xc9/0x1c0
[   81.442512][ T7973]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.448433][ T7973] 
[   81.450762][ T7973] value changed: 0x02000021 -> 0x04000021
[   81.456489][ T7973] 
[   81.458821][ T7973] Reported by Kernel Concurrency Sanitizer on:
[   81.464978][ T7973] CPU: 1 UID: 0 PID: 7973 Comm: syz.9.1585 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0
[   81.475668][ T7973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[   81.485726][ T7973] ==================================================================