last executing test programs:

14m13.199033145s ago: executing program 0 (id=1):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x800, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x241024, &(0x7f0000000940)={[], [{@obj_user={'obj_user', 0x3d, '\xe0.-@}]'}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x36, 0x31, 0x36, 0x35, 0x30, 0x34, 0x35], 0x2d, [0x36, 0x66, 0x30, 0x36], 0x2d, [0x62, 0x36, 0x38, 0x61], 0x2d, [0x31, 0x36, 0x64, 0x38], 0x2d, [0x37, 0x32, 0x63, 0x5a, 0x39, 0x39, 0x61, 0x32]}}}, {@hash}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@uid_lt}, {@measure}, {@appraise_type}, {@appraise}, {@obj_role={'obj_role', 0x3d, 'sysfs\x00'}}]}, 0x1, 0x43e, &(0x7f0000000a00)="$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")
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0)

14m12.867531616s ago: executing program 0 (id=6):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x147d42, 0x80)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x298, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x2, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x19, "ca7cfb3e2d5a024c88a5da5be8fb418c67e87b7888680941313e9eaa0fb2"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x1c)
connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c)
mlock(&(0x7f000021c000/0x4000)=nil, 0x4000)
r2 = fcntl$dupfd(r1, 0x406, r1)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000af299444b9e2dccabafae8e91be2ec190000000400000000000000950000084b09e700"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRES64], 0x2c}, 0x1, 0x0, 0x0, 0x8005}, 0x0)
write$binfmt_elf64(r2, &(0x7f00000004c0)=ANY=[], 0xfffffdcf)
socket$packet(0x11, 0x2, 0x300)
connect$unix(r2, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)

13m57.669311692s ago: executing program 32 (id=6):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x147d42, 0x80)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x298, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x2, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x19, "ca7cfb3e2d5a024c88a5da5be8fb418c67e87b7888680941313e9eaa0fb2"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x1c)
connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c)
mlock(&(0x7f000021c000/0x4000)=nil, 0x4000)
r2 = fcntl$dupfd(r1, 0x406, r1)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000af299444b9e2dccabafae8e91be2ec190000000400000000000000950000084b09e700"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRES64], 0x2c}, 0x1, 0x0, 0x0, 0x8005}, 0x0)
write$binfmt_elf64(r2, &(0x7f00000004c0)=ANY=[], 0xfffffdcf)
socket$packet(0x11, 0x2, 0x300)
connect$unix(r2, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)

10m22.337919941s ago: executing program 2 (id=1498):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffee1, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

10m22.213860195s ago: executing program 2 (id=1500):
openat$ppp(0xffffffffffffff9c, 0x0, 0x80802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e00)={r2, &(0x7f0000000840), 0x0}, 0x20)

10m16.4443656s ago: executing program 2 (id=1563):
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x24a3e241, 0xfffffff3})

10m16.337586554s ago: executing program 2 (id=1568):
syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x204, &(0x7f0000000300)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000600)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x9)

10m16.203373848s ago: executing program 2 (id=1572):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x170, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x1ff, 0x72, 0x8, 0x2, 0x1, 0xfffffffa, 0x6f2, 0x9, 0xb00, 0x17, 0xb, 0x1c, 0x8, 0x7, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r6, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14)

10m16.088035392s ago: executing program 2 (id=1578):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0x3, 0x4e21, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x2, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1d}, {0x3, 0xd42, 0x0, 0x2dd}, 0x0, 0x6e6bc0}, [@tmpl={0x84, 0x5, [{{@in6=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0x3}]}]}, 0x13c}}, 0x0)

10m16.055478003s ago: executing program 33 (id=1578):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0x3, 0x4e21, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x2, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1d}, {0x3, 0xd42, 0x0, 0x2dd}, 0x0, 0x6e6bc0}, [@tmpl={0x84, 0x5, [{{@in6=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0x3}]}]}, 0x13c}}, 0x0)

2m56.689463223s ago: executing program 6 (id=6787):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002440)=@newlink={0x38, 0x10, 0x437, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, 0x51b0b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendto$packet(r0, &(0x7f0000000000)='o', 0x1, 0x4, 0x0, 0x0)

2m56.654598945s ago: executing program 6 (id=6789):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000002200)=0x1)
write$ppp(r0, &(0x7f0000000480)="1e08", 0x2)

2m56.522120579s ago: executing program 6 (id=6797):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000", @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

2m56.439157772s ago: executing program 6 (id=6801):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220)

2m56.381167763s ago: executing program 6 (id=6803):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9, 0x10000})

2m56.117627032s ago: executing program 6 (id=6819):
timer_create(0x3, 0x0, &(0x7f0000044000)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x4b, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
close(0x3)
ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000080)=0x1)

2m56.080290224s ago: executing program 34 (id=6819):
timer_create(0x3, 0x0, &(0x7f0000044000)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x4b, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
close(0x3)
ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000080)=0x1)

10.353924037s ago: executing program 5 (id=9066):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
epoll_create1(0x80000)
socket$nl_route(0x10, 0x3, 0x0)
syz_clone(0x2c004100, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x102, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000100)={[{@errors_continue}, {@resuid}, {@minixdf}, {@jqfmt_vfsv0}, {@prjquota}, {@dioread_nolock}, {@data_err_ignore}, {@discard}, {@nodiscard}, {@noblock_validity}, {@nodiscard}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@smackfshat={'smackfshat', 0x3d, 'barrier'}}]}, 0x1, 0x475, &(0x7f0000000780)="$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")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0xfffffffd)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
r4 = accept4(r3, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x28, 0x0, 0x0, 0x2, 0x60}, 0xe)
stat(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)

10.320790138s ago: executing program 7 (id=9067):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xa0042, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x50000816)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtaction={0x80, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x6c, 0x1, [@m_csum={0x68, 0x1, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x0, 0x0, 0x400}, 0x2d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x4, 0x6, 0xfffffff9}, 0x64}}]}, {}, {0xffffffffffffff73}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r2, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540), &(0x7f00000002c0), 0x10000, r4, 0x0, 0x1c000000007400}, 0x38)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x800}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffefb}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}, 0x1, 0x0, 0x0, 0x420c4}, 0x0)
sendmsg$rds(r2, &(0x7f00000053c0)={&(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000140)=""/247, 0xf7}, {&(0x7f0000000240)=""/17, 0x11}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/153, 0x99}, {&(0x7f0000001340)=""/59, 0x3b}], 0x5, &(0x7f0000005180)=[@rdma_args={0x48, 0x114, 0x1, {{0x9}, {&(0x7f0000001400)=""/178, 0xb2}, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/246, 0xf6}, {&(0x7f00000015c0)=""/188, 0xbc}, {&(0x7f0000001680)=""/43, 0x2b}], 0x3, 0x1, 0x6}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001700)=""/144, 0x90}, &(0x7f00000017c0), 0x60}}, @fadd={0x58, 0x114, 0x6, {{0x18400, 0x3}, &(0x7f0000001800)=0x3, &(0x7f0000001840)=0x2, 0x40, 0x7, 0xffff, 0xc, 0x20, 0xe82}}, @rdma_args={0x48, 0x114, 0x1, {{0x1}, {&(0x7f0000001880)=""/48, 0x30}, &(0x7f0000003e40)=[{&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/165, 0xa5}, {&(0x7f0000002980)=""/126, 0x7e}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/193, 0xc1}, {&(0x7f0000003b00)=""/87, 0x57}, {&(0x7f0000003b80)=""/139, 0x8b}, {&(0x7f0000003c40)=""/57, 0x39}, {&(0x7f0000003c80)=""/204, 0xcc}, {&(0x7f0000003d80)=""/156, 0x9c}], 0xa, 0x64, 0x8}}, @mask_cswp={0x58, 0x114, 0x9, {{0x6, 0x10000}, &(0x7f0000003f00)=0x9, &(0x7f0000003f40)=0x8001, 0x8, 0x0, 0x7fffffff, 0x8, 0x28, 0x1ff}}, @rdma_dest={0x18, 0x114, 0x2, {0x2, 0x7}}, @mask_fadd={0x58, 0x114, 0x8, {{0x80000000, 0x9d}, &(0x7f0000003f80)=0x4, &(0x7f0000003fc0)=0x5, 0xffffffffffff8000, 0x8, 0x200, 0x645, 0x2, 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{0x1ff, 0x2}, {&(0x7f0000004000)}, &(0x7f0000005140)=[{&(0x7f0000004040)=""/239, 0xef}, {&(0x7f0000004140)=""/4096, 0x1000}], 0x2, 0x4, 0x400}}], 0x228, 0x4080}, 0x100)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000004000)={0x1, 0x5}, 0x8)

10.091821815s ago: executing program 3 (id=9069):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000cc0)=@newtfilter={0x488, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x454, 0x2, [@TCA_MATCHALL_ACT={0x450, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_mirred={0xfc, 0x1f, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x800, 0x0, 0x2, 0x3}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x7f, 0x2, 0x9, 0x7}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff0448, 0x1, 0xffffffffeffffffb, 0x6, 0x10}, 0x2}}]}, {0x6d, 0x6, "1e8c4f3b39707497f80bab956957df6cadad480128e8690e41a1edc1b28847db9bf65b27d2947aef1ffd9292e466ccc8f0505f15af02933633473cccf3d4f2e55bb1bc69587deedb88bf593b8aa5876105eb229de037c86000a0b58ef041f21cd16a567c2058580ff2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x128, 0x1a, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @TCA_IFE_TYPE={0x6, 0x5, 0x693}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x100, 0x1, 0x680000, 0x1}}}]}, {0xb0, 0x6, "710886f0111e4e260c5e009b04ae6888e0ef181a2181adb5c4ef67211454928121de30fdce431c35a0c1956316120526130f6384fb0cc81bd1a2b69a62df0cf5eedeae1b1c50e45ef4d1cf2c7d077ca5936e49faa1f1dcb6eb7ff241668c8b625fc4ce3fa62ee07021059dea2ec69163662ad209bf7c4c94c51b97499c7db3865eda8b3635ce05c39a7441964c78ac68791c73aa42fab917590b6d093c59fcd4ef15d277d693ad26590d4a1f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x1d4, 0x10, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x9, 0x0, 0x2, 0x5}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffe01, 0x3ff, 0x1, 0xff, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x6, 0x3, 0x7, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0x1, 0x8, 0xd0, 0x8001}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xaa, 0x3, 0x40, 0x4}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x1, 0x7, 0x9}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0xffffffffffffffff, 0x5, 0x800}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xdd08, 0x4, 0x7, 0xff, 0x7}, 0x3}}]}, {0xa8, 0x6, "c4ad74742f6399ec455222c3af23d20080c156a1daf71b00f8fd42a3053658e21b119c3fd8e4226ce8f4a00786201f4cf1a30dba595f53e4292f160ba490570d3c08079b44d482503c858674612c3242448fc1843b4f3d7a48a9613c85362131b0a6b39ff55789d57358cfd2576244be14ec00213906161a2fbf78440a529ef344ea7d46aa2252dbb5428af00f23ebb0b1be808a665a9db2f5941e8811cd9ade97f6052b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x40800}, 0x44000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r6 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4)

9.913225631s ago: executing program 5 (id=9071):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r9)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r8, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4)

6.986206326s ago: executing program 4 (id=9075):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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")
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000100)={<r3=>r2, &(0x7f0000000000)='\\-\x00', 0x80000, &(0x7f0000000040)={@align=0x5, {0x5, 0xfffb, 0x6}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c240000000000000f02257ff8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = add_key$keyring(&(0x7f0000000cc0), &(0x7f0000000c80)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r7)
keyctl$read(0xb, r7, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140))
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc)
getsockopt$inet_mreqn(r0, 0x0, 0x4, 0x0, &(0x7f0000000280)=0x4f)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002340)={0xc8, 0x0, &(0x7f0000000b80)=[@clear_death={0x400c630f, 0x3}, @exit_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000a00)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x6, 0x0, 0x1b}, @ptr={0x70742a85, 0x0, &(0x7f0000000940)=""/164, 0xa4, 0x1, 0x3b}}, 0x0}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000ac0)={@flat=@handle={0x73682a85, 0x1004, 0x1}, @fda={0x66646185, 0x3, 0x1, 0x29}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000b40)={0x0, 0x18, 0x38}}, 0x1000}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0x3}], 0x1000, 0x0, &(0x7f0000001340)="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"})
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0)

5.994202347s ago: executing program 7 (id=9076):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000005f40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002600)}}, {{&(0x7f0000002780)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000002e80)=[{&(0x7f00000027c0)='I', 0x1}], 0x1}}, {{&(0x7f0000002c80)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000000240)="e7", 0x1}], 0x1}}], 0x3, 0x4050000)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

5.967753128s ago: executing program 3 (id=9077):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
epoll_create1(0x80000)
socket$nl_route(0x10, 0x3, 0x0)
syz_clone(0x2c004100, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x102, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000100)={[{@errors_continue}, {@resuid}, {@minixdf}, {@jqfmt_vfsv0}, {@prjquota}, {@dioread_nolock}, {@data_err_ignore}, {@discard}, {@nodiscard}, {@noblock_validity}, {@nodiscard}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@smackfshat={'smackfshat', 0x3d, 'barrier'}}]}, 0x1, 0x475, &(0x7f0000000780)="$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")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20030, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0xfffffffd)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
r5 = accept4(r4, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x28, 0x0, 0x0, 0x2, 0x60}, 0xe)
stat(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)

5.306063169s ago: executing program 1 (id=9078):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0xd, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x44010)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfe, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xa, 0x8, 0x0, 0xf, 0x10, 0x1, 0x6, 0x2, 0x8, 0x0, 0x7, 0xfd, 0x2, 0x7, 0x8b, 0x6], 0x3, [0xc, 0x0, 0x7fff, 0x2002, 0x8, 0x4, 0x6, 0xd03, 0xae, 0x2, 0xb, 0x1, 0x6, 0x6, 0xd, 0x100], [0xf06f, 0x5, 0xffff, 0xfff5, 0x9, 0x5, 0x3, 0x2a, 0x401, 0x2, 0xc, 0x7, 0xfffc, 0x3, 0x4, 0xfffe]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x40)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r11, &(0x7f00000005c0), 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @multicast}, 0x14)

5.012146199s ago: executing program 7 (id=9079):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18)
sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000580)="5ab3715894", 0x5}, 0x1, 0x0, 0x0, 0x200088c0}, 0x4000000)
readv(r0, &(0x7f0000000440)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1)

4.959440171s ago: executing program 5 (id=9080):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)="fcbf7004c7b9554a40a2f7622cc0e9821168c2f5578f6932e868740d30536a0dad2ede052290a69ebeefa30ba8a93a62e9cb3399adc58ab10b686b688adef11faccc42218c4703e49d57986d24cac68f04372d3a3217ab6d27c8ec", 0x5b}, {&(0x7f0000000780)="6a9d85cc2c0b71201b1d781745759c8f1261a9dceb8e3cd4fad301a5e0b62ad5e511dc1527a62161a060aa4bbef8fca37b26e6d140374b25990f630e1ac91e90c22c4088376a5f7a5924028fd37166d694ebd56fcda79e8f69c404d2b156df0dfe98df6c2e18417697812423bd038eb5c78feb9829c1acf23d31053da402c56285d846b92b8532184bda4e54f19c62441bda85122bb239c32033020041fdaf9e6db65e00040000408a", 0xa9}, {&(0x7f0000000400)="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", 0xfb}, {&(0x7f0000000500)="1958fede834c444ae519bac89f017c0b7cb678679c6dd42c34dcfad8da942318b8f417bb096302c482f606443310702021b674713b443b2e05409f85fb95c9f5b5bbe75dc142cb7a02ebacdf81bb4c69ee839dd76ef101e249abf89e5a844f2dd8ebf03d87cc2eaab56103824dd774d75e454c46a1ad9be9710e4ecf5fd82010cc197f3b957293e600194245c2a7822deaa39eb77696a98ae1988d2ea1567d621b9dc7fa51048c2c7c459e61136372dfeb91", 0xb2}, {&(0x7f00000005c0)="527c936394bd02a68f4ffa70de76d9bff50e7702f77edbf2e14e2b31b5b3723ac1c8d5e68448dc388a6d6e091cbaf92262c9033020e007bc9e677e51b23d7b569cf94603b6072bfd725400b0a5968b3e08e873fbd12ab457419e1ebd8b7819fcfc638abf611bcc2949de6799b08b733a9d", 0x71}, {&(0x7f0000000640)="b2dfe9b6aa4abfda55b71bb4afc0e71c0569524dd98fb1e3e3b4f973ae9aa95e64a215cf072fcc49258c3f2d2ea1eacf924a6feb1cca6476874fbde0b029743024b71aae5e034a6d896ed2a9d0e1023648c26c3634be", 0x56}, {&(0x7f00000006c0)="90eb48b2b3ced8152e632ad5764c296bb2ede821127ad4e5bb15c6b7f1ebeff3961cb95dfac97f13291e1c926e2527c4c70b83e75545f0969575e503f1", 0x3d}], 0x7}, 0x10048014)

4.95849646s ago: executing program 4 (id=9081):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d41bca23", 0xde}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000440)="7cc9483e0b2212b8b5d0ab5223f9b22b4b5bd5036f55b4568dbffe5662e5c329dd834e", 0x23}, {&(0x7f0000000880)="fb70b4c3828979137f8e899a032064ee15287cc8803ecee7b6203553b506e26c7d9d0bf628b2580352c6639716dcf515e2c2064edfd15755838f79f931eb9c11172d52729c2254544f874aae59c290a952e0ecc77fc3a0de141c9d400d745477bab96a1e7761f848770256982aca14bb8fa9c1376b86efb6b64f5659dd789559a0efb98f0ebd2742cbae22991d78c791f3c09542a7d7d72ec89d5222fefd5a8d582e5bd519708451504bf200358d6e6e2398c9063da16015", 0xb8}], 0x2}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000d40)="527a464c354b9bc3aea3f585674edd616a86dbb824ae6f56cbb99d9fe986bdd2d1c0992390cd0829706c9aeea8236287a152a036c32ea310fc45c151b6a4d792512173f3f8b7d9e62f43d3191f87276e61395134553c7d8c0669005d41bcda2432aac881de0c929f0ac64bd5be", 0x6d}], 0x1}}], 0x3, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

4.895624503s ago: executing program 5 (id=9082):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x24040004}, 0x8000)
socket$inet(0x2, 0x4000000000000001, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x0, 0x0, 0x401, 0x8001, 0x401402}, 0x4, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x44080)
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x12)
fcntl$setlease(r3, 0x400, 0x0)
unshare(0x20000000)
bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x17, 0x0, @val=@tcx}, 0x1c)
fcntl$setlease(r3, 0x400, 0x2)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sync()

4.894594653s ago: executing program 4 (id=9083):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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")
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000100)={<r3=>r2, &(0x7f0000000000)='\\-\x00', 0x80000, &(0x7f0000000040)={@align=0x5, {0x5, 0xfffb, 0x6}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x10)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c240000000000000f02257ff8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = add_key$keyring(&(0x7f0000000cc0), &(0x7f0000000c80)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$read(0xb, r7, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140))
setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc)
getsockopt$inet_mreqn(r0, 0x0, 0x4, 0x0, &(0x7f0000000280)=0x4f)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002340)={0xc8, 0x0, &(0x7f0000000b80)=[@clear_death={0x400c630f, 0x3}, @exit_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000a00)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x6, 0x0, 0x1b}, @ptr={0x70742a85, 0x0, &(0x7f0000000940)=""/164, 0xa4, 0x1, 0x3b}}, 0x0}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000ac0)={@flat=@handle={0x73682a85, 0x1004, 0x1}, @fda={0x66646185, 0x3, 0x1, 0x29}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000b40)={0x0, 0x18, 0x38}}, 0x1000}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0x3}], 0x1000, 0x0, &(0x7f0000001340)="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"})

4.739558358s ago: executing program 1 (id=9084):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0xb, 0x4, 0x4, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.738483398s ago: executing program 3 (id=9085):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
r5 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil)
shmat(r5, &(0x7f0000f62000/0x1000)=nil, 0x7000)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x47e, &(0x7f0000000640)="$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")
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103)
shmat(r5, &(0x7f0000be5000/0x7000)=nil, 0x3000)
pipe(0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x88000cc, 0x0)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r7, &(0x7f0000004b40)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000002c0)='(', 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0xc}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)="a034cd2f13426fab9e12d4cca2eeda17359c44f25e9c", 0x16}], 0x1}}], 0x2, 0x0)
shutdown(r7, 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0x8001, 0x202, 0x7, 0x100}, 0x10)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100004)
write$eventfd(0xffffffffffffffff, &(0x7f0000000240), 0xffffff14)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

3.704294681s ago: executing program 5 (id=9086):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc220000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

3.633792553s ago: executing program 7 (id=9087):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x24040004}, 0x8000)
socket$inet(0x2, 0x4000000000000001, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x0, 0x0, 0x401, 0x8001, 0x401402}, 0x4, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x44080)
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x12)
fcntl$setlease(r3, 0x400, 0x0)
bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x17, 0x0, @val=@tcx}, 0x1c)
fcntl$setlease(r3, 0x400, 0x2)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sync()
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)

2.581058367s ago: executing program 4 (id=9088):
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fedbdf254c0000000c00b70000000000000000000e0001"], 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x4005000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a00"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054)

2.560350888s ago: executing program 1 (id=9089):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000005f40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002600)=[{0x0}], 0x1}}, {{&(0x7f0000002780)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000002e80)=[{&(0x7f00000027c0)='I', 0x1}], 0x1}}, {{&(0x7f0000002c80)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000000240)="e7", 0x1}], 0x1}}], 0x3, 0x4050000)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

2.433863652s ago: executing program 1 (id=9090):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r9)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r8, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4)

2.343989085s ago: executing program 5 (id=9091):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xa0042, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x50000816)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtaction={0x80, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x6c, 0x1, [@m_csum={0x68, 0x1, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x0, 0x0, 0x400}, 0x2d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x4, 0x6, 0xfffffff9}, 0x64}}]}, {}, {0xffffffffffffff73}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r2, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540), &(0x7f00000002c0), 0x10000, r4, 0x0, 0x1c000000007400}, 0x38)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x800}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffefb}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}, 0x1, 0x0, 0x0, 0x420c4}, 0x0)
sendmsg$rds(r2, &(0x7f00000053c0)={&(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000140)=""/247, 0xf7}, {&(0x7f0000000240)=""/17, 0x11}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/153, 0x99}, {&(0x7f0000001340)=""/59, 0x3b}], 0x5, &(0x7f0000005180)=[@rdma_args={0x48, 0x114, 0x1, {{0x9}, {&(0x7f0000001400)=""/178, 0xb2}, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/246, 0xf6}, {&(0x7f00000015c0)=""/188, 0xbc}, {&(0x7f0000001680)=""/43, 0x2b}], 0x3, 0x1, 0x6}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001700)=""/144, 0x90}, &(0x7f00000017c0), 0x60}}, @fadd={0x58, 0x114, 0x6, {{0x18400, 0x3}, &(0x7f0000001800)=0x3, &(0x7f0000001840)=0x2, 0x40, 0x7, 0xffff, 0xc, 0x20, 0xe82}}, @rdma_args={0x48, 0x114, 0x1, {{0x1}, {&(0x7f0000001880)=""/48, 0x30}, &(0x7f0000003e40)=[{&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/165, 0xa5}, {&(0x7f0000002980)=""/126, 0x7e}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/193, 0xc1}, {&(0x7f0000003b00)=""/87, 0x57}, {&(0x7f0000003b80)=""/139, 0x8b}, {&(0x7f0000003c40)=""/57, 0x39}, {&(0x7f0000003c80)=""/204, 0xcc}, {&(0x7f0000003d80)=""/156, 0x9c}], 0xa, 0x64, 0x8}}, @mask_cswp={0x58, 0x114, 0x9, {{0x6, 0x10000}, &(0x7f0000003f00)=0x9, &(0x7f0000003f40)=0x8001, 0x8, 0x0, 0x7fffffff, 0x8, 0x28, 0x1ff}}, @rdma_dest={0x18, 0x114, 0x2, {0x2, 0x7}}, @mask_fadd={0x58, 0x114, 0x8, {{0x80000000, 0x9d}, &(0x7f0000003f80)=0x4, &(0x7f0000003fc0)=0x5, 0xffffffffffff8000, 0x8, 0x200, 0x645, 0x2, 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{0x1ff, 0x2}, {&(0x7f0000004000)}, &(0x7f0000005140)=[{&(0x7f0000004040)=""/239, 0xef}, {&(0x7f0000004140)=""/4096, 0x1000}], 0x2, 0x4, 0x400}}], 0x228, 0x4080}, 0x100)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000004000)={0x1, 0x5}, 0x8)

2.265410547s ago: executing program 7 (id=9092):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
r5 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil)
shmat(r5, &(0x7f0000f62000/0x1000)=nil, 0x7000)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x47e, &(0x7f0000000640)="$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")
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3)
mknodat$null(0xffffffffffffff9c, 0x0, 0x1d4e, 0x103)
shmat(r5, &(0x7f0000be5000/0x7000)=nil, 0x3000)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x88000cc, 0x0)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r8, &(0x7f0000004b40)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000002c0)='(', 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0xc}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)="a034cd2f13426fab9e12d4cca2eeda17359c44f25e9c", 0x16}], 0x1}}], 0x2, 0x0)
shutdown(r8, 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000100)={0x8001, 0x202, 0x7, 0x100}, 0x10)
fcntl$setpipe(r6, 0x407, 0x100004)
write$eventfd(r6, &(0x7f0000000240), 0xffffff14)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

2.17664411s ago: executing program 3 (id=9093):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d41bca23", 0xde}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000440)="7cc9483e0b2212b8b5d0ab5223f9b22b4b5bd5036f55b4568dbffe5662e5c329dd834e", 0x23}, {&(0x7f0000000880)="fb70b4c3828979137f8e899a032064ee15287cc8803ecee7b6203553b506e26c7d9d0bf628b2580352c6639716dcf515e2c2064edfd15755838f79f931eb9c11172d52729c2254544f874aae59c290a952e0ecc77fc3a0de141c9d400d745477bab96a1e7761f848770256982aca14bb8fa9c1376b86efb6b64f5659dd789559a0efb98f0ebd2742cbae22991d78c791f3c09542a7d7d72ec89d5222fefd5a8d582e5bd519708451504bf200358d6e6e2398c9063da16015", 0xb8}], 0x2}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000d40)="527a464c354b9bc3aea3f585674edd616a86dbb824ae6f56cbb99d9fe986bdd2d1c0992390cd0829706c9aeea8236287a152a036c32ea310fc45c151b6a4d792512173f3f8b7d9e62f43d3191f87276e61395134553c7d8c0669005d41bcda2432aac881de0c929f0ac64bd5be", 0x6d}], 0x1}}], 0x3, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

2.138588442s ago: executing program 4 (id=9094):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0xd, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x44010)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfe, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xa, 0x8, 0x0, 0xf, 0x10, 0x1, 0x6, 0x2, 0x8, 0x0, 0x7, 0xfd, 0x2, 0x7, 0x8b, 0x6], 0x3, [0xc, 0x0, 0x7fff, 0x2002, 0x8, 0x4, 0x6, 0xd03, 0xae, 0x2, 0xb, 0x1, 0x6, 0x6, 0xd, 0x100], [0xf06f, 0x5, 0xffff, 0xfff5, 0x9, 0x5, 0x3, 0x2a, 0x401, 0x2, 0xc, 0x7, 0xfffc, 0x3, 0x4, 0xfffe]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x40)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r11, &(0x7f00000005c0), 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @multicast}, 0x14)

2.081312263s ago: executing program 3 (id=9095):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0xb, 0x4, 0x4, 0x0, 0x1}, 0x50)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.029795425s ago: executing program 3 (id=9096):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
epoll_create1(0x80000)
socket$nl_route(0x10, 0x3, 0x0)
syz_clone(0x2c004100, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x102, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000100)={[{@errors_continue}, {@resuid}, {@minixdf}, {@jqfmt_vfsv0}, {@prjquota}, {@dioread_nolock}, {@data_err_ignore}, {@discard}, {@nodiscard}, {@noblock_validity}, {@nodiscard}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@smackfshat={'smackfshat', 0x3d, 'barrier'}}]}, 0x1, 0x475, &(0x7f0000000780)="$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")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0xfffffffd)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
r4 = accept4(r3, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x28, 0x0, 0x0, 0x2, 0x60}, 0xe)
stat(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)

1.526080311s ago: executing program 1 (id=9097):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18)
sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000580)="5ab3715894", 0x5}, 0x1, 0x0, 0x0, 0x200088c0}, 0x4000000)
readv(r0, &(0x7f0000000440)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1)

1.025691937s ago: executing program 4 (id=9098):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
r5 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil)
shmat(r5, &(0x7f0000f62000/0x1000)=nil, 0x7000)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x47e, &(0x7f0000000640)="$eJzs3MtvG8UfAPDv2kn66+uXUMqjpYXQUlHxSJr0QQ9cikDiABISHIo4hSStSt0GNUGiVQUth3JElbgjuCHxF3ChXBBwQuKEBBJHhFShXlo4Ga29a1zHTpzEsQP+fKRNZjKzmvnu7tjjWW8C6Fuj6Y8kYltE/BwRw9Xs3RVGq7/u3Lo8/eety9NJlMuv/pFU6t2+dXk6r5rvt7WaKZeXaPfaGxFTpdLshSw/vnDu7fH5i5eePnNu6vTs6dnzk8ePHzm8d+jY5NGOxJnGdXv3e3N7dr34+vWXp09ef/O7L9L+bsvK6+PolNHq0W3qQKcb67HtdelkoIcdYUWKEZGersHK+B+OYmyulQ3HCx/0tHPAuiqXC+VNrYuvlIH/sHSiDvSj/I0+/fybb12aemwIN09EbR3jTrZVSwaikNUZzD4jrYfRiDh55a9P0i3WaR0CAKDejRMR8VSz+V8h7q+r9//sHspIRNwTETsi4t6I2BkR90VU6j4QEQ+usP3GOySL5z/l4VUF1qZ0/vdsdm/r7vlfPvuLkWKW216JfzA5daY0eyg7JgdjcFOan1iija+f//GjVmX18790S9vP54JZP34faFigm5lamFpLzPVuXo3YPdAs/qQ2503nx7siYvcq2zjzxOd7WpWNLBv/EjowKS9/GvF49fxfiYb4c0nL+5MTzxybPDr+vyjNHhrPr4rFvv/h2iut2l98/g98FtFm/B1w80Y5tjRc/w2HdSQZylKl0uyF+RU28FPEtV8+bPmZZrXX/1DyWiWdd+3dqYWFCxMRQ8lLi/8++c++eT6vn17/B/fX4k+ibvzvyPZJz/9DEZFexHsj4uGIeCTr+6MRsS8i9i9xCL597rG3Vh7/EqvyHZTGP9P09a92/Y+kqfmLl85W7tevIlE8+82XK48/tSU7/0cquYPZPu28/rXbwbUePwAAAPg3KFS+A58UxmrpQmFsrPod/p2xpVCam1948tTcO+dnqt+VH4nBQr7SNVy3HjqRreXl+cmG/OFs3fjj4uZKfmx6rjTT6+Chz21tMf5TvxWrv3/taQ+BdeV5Lehfxj/0L+Mf+pfxD/3L+If+1Wz8v9+DfgDdt8z7/+Zu9QPoPvN/6F/GP/Sv5cb/vu48iwx0V8tn4wtreuRfokeJr4bW9r8a2k9EYYOEvEETxTbqXM1GYfUvg9G08kDb/8zirkT+pr585U1Ni3r4ogQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBBfwcAAP//7+7Zrg==")
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103)
shmat(r5, &(0x7f0000be5000/0x7000)=nil, 0x3000)
pipe(0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x88000cc, 0x0)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r7, &(0x7f0000004b40)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000002c0)='(', 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0xc}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)="a034cd2f13426fab9e12d4cca2eeda17359c44f25e9c", 0x16}], 0x1}}], 0x2, 0x0)
shutdown(r7, 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0x8001, 0x202, 0x7, 0x100}, 0x10)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100004)
write$eventfd(0xffffffffffffffff, &(0x7f0000000240), 0xffffff14)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

41.448569ms ago: executing program 7 (id=9099):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
close(r0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 1 (id=9100):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000005f40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002600)=[{0x0}], 0x1}}, {{&(0x7f0000002780)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000002e80)=[{&(0x7f00000027c0)='I', 0x1}], 0x1}}, {{&(0x7f0000002c80)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000000240)="e7", 0x1}], 0x1}}], 0x3, 0x4050000)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

r_driver returned -16
[  756.078533][T26043] netlink: 'syz.7.7894': attribute type 1 has an invalid length.
[  756.092219][T26043] 8021q: adding VLAN 0 to HW filter on device bond4
[  756.105025][T26043] vlan3: entered allmulticast mode
[  756.110363][T26043] bond4: entered allmulticast mode
[  756.339767][T26060] syzkaller0: entered promiscuous mode
[  756.350769][T26060] syzkaller0: entered allmulticast mode
[  756.436260][T26070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  756.454209][T26070] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  756.510570][T26066] TC_ACT_REPEAT abuse ?
[  756.794426][T26090] netlink: 'syz.5.7912': attribute type 1 has an invalid length.
[  756.964555][T26105] syzkaller0: entered promiscuous mode
[  756.970227][T26105] syzkaller0: entered allmulticast mode
[  757.076709][T26113] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7921'.
[  757.212571][T26125] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7926'.
[  757.262008][T26132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  757.281822][T26132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  757.303833][T26137] syzkaller0: entered promiscuous mode
[  757.310020][T26137] syzkaller0: entered allmulticast mode
[  757.627155][T26157] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7941'.
[  757.634955][T26155] TC_ACT_REPEAT abuse ?
[  757.873373][T26165] syzkaller0: entered promiscuous mode
[  757.882596][T26165] syzkaller0: entered allmulticast mode
[  758.153646][T26188] syzkaller0: entered promiscuous mode
[  758.159321][T26188] syzkaller0: entered allmulticast mode
[  758.239614][T26200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7961'.
[  758.320766][T26208] syzkaller0: entered promiscuous mode
[  758.337034][T26208] syzkaller0: entered allmulticast mode
[  758.581985][   T28] audit: type=1400 audit(2000000804.225:827): avc:  denied  { setopt } for  pid=26240 comm="syz.1.7977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  758.761368][T26260] syzkaller0: entered promiscuous mode
[  758.766948][T26260] syzkaller0: entered allmulticast mode
[  758.889501][T26268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  758.898233][T26268] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  759.495567][   T28] audit: type=1400 audit(2000000805.086:828): avc:  denied  { getopt } for  pid=26279 comm="syz.3.7995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  759.537661][T26282] syzkaller0: entered promiscuous mode
[  759.543231][T26282] syzkaller0: entered allmulticast mode
[  760.541664][T26303] netlink: 'syz.5.8006': attribute type 1 has an invalid length.
[  760.555315][T26303] 8021q: adding VLAN 0 to HW filter on device bond2
[  760.567199][T26303] vlan4: entered allmulticast mode
[  760.572347][T26303] bond2: entered allmulticast mode
[  760.810948][T26309] TC_ACT_REPEAT abuse ?
[  761.061693][T26315] syzkaller0: entered promiscuous mode
[  761.067391][T26315] syzkaller0: entered allmulticast mode
[  761.257258][T26321] syzkaller0: entered promiscuous mode
[  761.262871][T26321] syzkaller0: entered allmulticast mode
[  761.553441][T26215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  761.668668][T26334] syzkaller0: entered promiscuous mode
[  761.682809][T26334] syzkaller0: entered allmulticast mode
[  761.696040][T26337] syzkaller0: entered promiscuous mode
[  761.702691][T26337] syzkaller0: entered allmulticast mode
[  761.892769][T26346] syzkaller0: entered promiscuous mode
[  761.902082][T26346] syzkaller0: entered allmulticast mode
[  762.067485][T26372] loop3: detected capacity change from 0 to 7
[  762.169943][T26377] syzkaller0: entered promiscuous mode
[  762.175478][T26377] syzkaller0: entered allmulticast mode
[  765.088974][T26349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  765.249234][T26400] netlink: 'syz.4.8047': attribute type 1 has an invalid length.
[  765.293382][T26400] 8021q: adding VLAN 0 to HW filter on device bond3
[  765.377599][T26400] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8047'.
[  765.390527][T26410] vlan0: entered allmulticast mode
[  765.399382][T26410] bond3: entered allmulticast mode
[  765.409947][T26412] netlink: 'syz.7.8053': attribute type 12 has an invalid length.
[  765.419611][T26412] netlink: 'syz.7.8053': attribute type 29 has an invalid length.
[  765.428747][T26412] netlink: 148 bytes leftover after parsing attributes in process `syz.7.8053'.
[  765.736930][T26449] syzkaller0: entered promiscuous mode
[  765.742574][T26449] syzkaller0: entered allmulticast mode
[  765.839077][T26451] netlink: 'syz.7.8065': attribute type 1 has an invalid length.
[  765.852597][T26451] 8021q: adding VLAN 0 to HW filter on device bond5
[  765.865527][T26451] vlan4: entered allmulticast mode
[  765.870676][T26451] bond5: entered allmulticast mode
[  765.876903][T26451] netlink: 56 bytes leftover after parsing attributes in process `syz.7.8065'.
[  766.163102][T26474] syzkaller0: entered promiscuous mode
[  766.168657][T26474] syzkaller0: entered allmulticast mode
[  766.239338][T26478] netlink: 'syz.3.8076': attribute type 1 has an invalid length.
[  766.261135][T26478] 8021q: adding VLAN 0 to HW filter on device bond2
[  766.275113][T26478] vlan3: entered allmulticast mode
[  766.280480][T26478] bond2: entered allmulticast mode
[  766.286501][T26478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8076'.
[  766.295583][T26478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8076'.
[  766.354255][T26485] TC_ACT_REPEAT abuse ?
[  766.703810][T26506] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8088'.
[  766.723982][T26508] netlink: 'syz.7.8089': attribute type 1 has an invalid length.
[  766.734647][T26506] netlink: 'syz.3.8088': attribute type 10 has an invalid length.
[  766.735627][T26504] syzkaller0: entered promiscuous mode
[  766.748176][T26504] syzkaller0: entered allmulticast mode
[  766.763415][T26508] 8021q: adding VLAN 0 to HW filter on device bond6
[  766.774451][T26506] team0: Device ipvlan1 failed to register rx_handler
[  766.804687][T26508] vlan5: entered allmulticast mode
[  766.809906][T26508] bond6: entered allmulticast mode
[  766.817019][T26508] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8089'.
[  766.825971][T26508] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8089'.
[  767.322697][T26541] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8100'.
[  767.334892][T26541] netlink: 'syz.4.8100': attribute type 10 has an invalid length.
[  767.351900][T26541] team0: Device ipvlan1 failed to register rx_handler
[  767.428602][T26543] syzkaller0: entered promiscuous mode
[  767.434089][T26543] syzkaller0: entered allmulticast mode
[  768.604754][T26414] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  768.665262][T26562] netlink: 'syz.5.8109': attribute type 12 has an invalid length.
[  768.679564][T26562] netlink: 'syz.5.8109': attribute type 29 has an invalid length.
[  768.702220][T26562] netlink: 148 bytes leftover after parsing attributes in process `syz.5.8109'.
[  768.785807][T26576] netlink: 'syz.5.8115': attribute type 1 has an invalid length.
[  768.790317][T26571] syzkaller0: entered promiscuous mode
[  768.799293][T26571] syzkaller0: entered allmulticast mode
[  768.828586][T26576] 8021q: adding VLAN 0 to HW filter on device bond3
[  768.862144][T26585] vlan5: entered allmulticast mode
[  768.871732][T26585] bond3: entered allmulticast mode
[  769.000812][T26601] syzkaller0: entered promiscuous mode
[  769.010770][T26601] syzkaller0: entered allmulticast mode
[  769.019319][T26606] netlink: 'syz.3.8126': attribute type 12 has an invalid length.
[  769.027393][T26606] netlink: 'syz.3.8126': attribute type 29 has an invalid length.
[  769.260390][T26626] syzkaller0: entered promiscuous mode
[  769.266794][T26626] syzkaller0: entered allmulticast mode
[  769.417063][T26647] syzkaller0: entered promiscuous mode
[  769.423673][T26647] syzkaller0: entered allmulticast mode
[  769.491786][T26657] syzkaller0: entered promiscuous mode
[  769.497450][T26657] syzkaller0: entered allmulticast mode
[  769.641577][T26670] syzkaller0: entered promiscuous mode
[  769.649408][T26670] syzkaller0: entered allmulticast mode
[  769.744390][T26685] syzkaller0: entered promiscuous mode
[  769.749988][T26685] syzkaller0: entered allmulticast mode
[  769.790163][T26689] syzkaller0: entered promiscuous mode
[  769.801515][T26689] syzkaller0: entered allmulticast mode
[  769.983119][   T28] audit: type=1326 audit(2000000814.893:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26716 comm="syz.4.8177" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc90fb2ce59 code=0x0
[  770.010869][T26719] netlink: 'syz.1.8178': attribute type 1 has an invalid length.
[  770.169133][T26735] syzkaller0: entered promiscuous mode
[  770.174861][T26735] syzkaller0: entered allmulticast mode
[  770.225441][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811975ae00: rx timeout, send abort
[  770.259466][   T28] audit: type=1400 audit(2000000815.155:830): avc:  denied  { name_bind } for  pid=26738 comm="syz.7.8187" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  770.759744][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811dbad200: rx timeout, send abort
[  770.768059][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811975ae00: abort rx timeout. Force session deactivation
[  770.860809][T26775] __nla_validate_parse: 6 callbacks suppressed
[  770.860828][T26775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8202'.
[  770.906941][T26779] loop3: detected capacity change from 0 to 7
[  771.045568][T26801] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8215'.
[  771.063601][T26801] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8215'.
[  771.110544][T26808] loop3: detected capacity change from 0 to 7
[  771.226712][T26824] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8224'.
[  771.244190][T26827] syzkaller0: entered promiscuous mode
[  771.249766][T26827] syzkaller0: entered allmulticast mode
[  771.302294][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811dbad200: abort rx timeout. Force session deactivation
[  771.403827][T26842] TC_ACT_REPEAT abuse ?
[  771.408464][T26845] loop3: detected capacity change from 0 to 7
[  771.865191][T26889] validate_nla: 1 callbacks suppressed
[  771.865210][T26889] netlink: 'syz.1.8252': attribute type 1 has an invalid length.
[  771.888932][T26889] 8021q: adding VLAN 0 to HW filter on device bond5
[  771.913509][T26889] vlan4: entered allmulticast mode
[  771.923790][T26889] bond5: entered allmulticast mode
[  771.929794][T26889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8252'.
[  771.938863][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811b92a000: rx timeout, send abort
[  771.947189][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b92a000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  772.269422][T26935] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8269'.
[  772.291806][T26935] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8269'.
[  772.327220][T26943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  772.336109][T26943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  772.367871][   T28] audit: type=1400 audit(2000000817.120:831): avc:  denied  { watch watch_reads } for  pid=26944 comm="syz.3.8274" path="/404/file1" dev="tmpfs" ino=2058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  772.430479][T26953] TC_ACT_REPEAT abuse ?
[  772.774000][T26970] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  772.782426][T26970] tipc: Resetting bearer <eth:syzkaller0>
[  772.791018][T26969] tipc: Disabling bearer <eth:syzkaller0>
[  772.832384][T26976] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8289'.
[  773.025384][T27000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8301'.
[  773.245742][T27035] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8313'.
[  773.339639][T27045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  773.362727][T27045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  773.563642][T27066] tipc: Started in network mode
[  773.568779][T27066] tipc: Node identity 2ede56e14e11, cluster identity 4711
[  773.575949][T27066] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  773.583086][T27066] syzkaller0: entered promiscuous mode
[  773.588805][T27066] syzkaller0: entered allmulticast mode
[  773.598216][T27066] tipc: Resetting bearer <eth:syzkaller0>
[  773.605618][T27065] tipc: Resetting bearer <eth:syzkaller0>
[  773.613097][T27065] tipc: Disabling bearer <eth:syzkaller0>
[  773.701472][T27068] TC_ACT_REPEAT abuse ?
[  773.903907][T27076] syzkaller0: entered promiscuous mode
[  773.909484][T27076] syzkaller0: entered allmulticast mode
[  774.094839][T27093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27093 comm=syz.7.8337
[  774.291811][T27106] TC_ACT_REPEAT abuse ?
[  774.568549][T27120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27120 comm=syz.3.8348
[  774.615308][T27124] syzkaller0: entered promiscuous mode
[  774.620865][T27124] syzkaller0: entered allmulticast mode
[  774.623296][T27112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  774.635097][T27112] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  774.660517][T27126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  774.673499][T27126] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  774.964852][T27145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27145 comm=syz.5.8359
[  775.041008][T27149] TC_ACT_REPEAT abuse ?
[  775.385383][T27176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27176 comm=syz.3.8371
[  775.767244][T27224] syzkaller0: entered promiscuous mode
[  775.773042][T27224] syzkaller0: entered allmulticast mode
[  776.297130][T27260] syzkaller0: entered promiscuous mode
[  776.302756][T27260] syzkaller0: entered allmulticast mode
[  776.483551][T27266] __nla_validate_parse: 6 callbacks suppressed
[  776.483565][T27266] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8410'.
[  776.545696][T27272] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8412'.
[  776.679958][T27289] syzkaller0: entered promiscuous mode
[  776.685616][T27289] syzkaller0: entered allmulticast mode
[  776.716528][T27292] tipc: Started in network mode
[  776.721723][T27292] tipc: Node identity d2be13b39fa5, cluster identity 4711
[  776.729036][T27292] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  776.736499][T27292] syzkaller0: entered promiscuous mode
[  776.742321][T27292] syzkaller0: entered allmulticast mode
[  776.751429][T27292] tipc: Resetting bearer <eth:syzkaller0>
[  776.760787][T27291] tipc: Resetting bearer <eth:syzkaller0>
[  776.773323][T27291] tipc: Disabling bearer <eth:syzkaller0>
[  776.784362][T27294] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8421'.
[  776.857838][T27303] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  776.865186][T27303] IPv6: NLM_F_CREATE should be set when creating new route
[  776.909050][T27306] syzkaller0: entered promiscuous mode
[  776.915817][T27306] syzkaller0: entered allmulticast mode
[  777.228650][T27351] syzkaller0: entered promiscuous mode
[  777.234278][T27351] syzkaller0: entered allmulticast mode
[  777.384710][T27343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  777.397677][T27343] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  777.473043][T27371] TC_ACT_REPEAT abuse ?
[  777.674543][T27374] syzkaller0: entered promiscuous mode
[  777.680125][T27374] syzkaller0: entered allmulticast mode
[  777.756475][T27382] syzkaller0: entered promiscuous mode
[  777.764338][T27382] syzkaller0: entered allmulticast mode
[  777.878392][T27398] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8464'.
[  777.978165][T27405] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8467'.
[  778.075554][T27420] syzkaller0: entered promiscuous mode
[  778.081383][T27420] syzkaller0: entered allmulticast mode
[  778.156345][T27429] netlink: 60 bytes leftover after parsing attributes in process `syz.7.8479'.
[  778.389677][T27462] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8494'.
[  778.418916][T27465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  778.427747][T27465] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  778.546525][T27480] TC_ACT_REPEAT abuse ?
[  778.818434][T27491] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8507'.
[  778.865550][T27495] syzkaller0: entered promiscuous mode
[  778.872489][T27495] syzkaller0: entered allmulticast mode
[  778.983229][   T28] audit: type=1400 audit(2000000823.315:832): avc:  denied  { name_bind } for  pid=27498 comm="syz.3.8511" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[  779.168294][T27523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  779.177158][T27523] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  779.248816][T27530] syzkaller0: entered promiscuous mode
[  779.254581][T27530] syzkaller0: entered allmulticast mode
[  779.756373][T27572] netlink: 'syz.7.8540': attribute type 1 has an invalid length.
[  779.771099][T27572] 8021q: adding VLAN 0 to HW filter on device bond7
[  779.785701][T27572] vlan6: entered allmulticast mode
[  779.790919][T27572] bond7: entered allmulticast mode
[  779.797212][T27572] netlink: 56 bytes leftover after parsing attributes in process `syz.7.8540'.
[  780.071199][T27609] netlink: 'syz.3.8552': attribute type 1 has an invalid length.
[  780.085807][T27609] 8021q: adding VLAN 0 to HW filter on device bond3
[  780.093971][T27612] netlink: 'syz.7.8553': attribute type 12 has an invalid length.
[  780.101947][T27612] netlink: 'syz.7.8553': attribute type 29 has an invalid length.
[  780.109923][T27612] netlink: 148 bytes leftover after parsing attributes in process `syz.7.8553'.
[  780.123536][T27609] vlan4: entered allmulticast mode
[  780.128731][T27609] bond3: entered allmulticast mode
[  780.370801][T27647] netlink: 'syz.1.8565': attribute type 1 has an invalid length.
[  780.372771][T27648] netlink: 'syz.7.8564': attribute type 12 has an invalid length.
[  780.388314][T27648] netlink: 'syz.7.8564': attribute type 29 has an invalid length.
[  780.418350][T27647] 8021q: adding VLAN 0 to HW filter on device bond6
[  780.436750][T27656] vlan5: entered allmulticast mode
[  780.450004][T27656] bond6: entered allmulticast mode
[  780.480038][T27658] syzkaller0: entered promiscuous mode
[  780.492644][T27658] syzkaller0: entered allmulticast mode
[  780.683430][T27675] syzkaller0: entered promiscuous mode
[  780.689091][T27675] syzkaller0: entered allmulticast mode
[  781.225189][T27684] netlink: 'syz.3.8581': attribute type 1 has an invalid length.
[  781.238918][T27684] 8021q: adding VLAN 0 to HW filter on device bond4
[  781.251904][T27684] vlan5: entered allmulticast mode
[  781.257143][T27684] bond4: entered allmulticast mode
[  781.291520][T27687] TC_ACT_REPEAT abuse ?
[  781.386604][T27689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  781.396600][T27689] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  781.407936][T27689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  781.417943][T27689] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  781.618470][T27703] syzkaller0: entered promiscuous mode
[  781.624044][T27703] syzkaller0: entered allmulticast mode
[  781.904809][T27737] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  781.928356][T27731] syzkaller0: entered promiscuous mode
[  781.933889][T27731] syzkaller0: entered allmulticast mode
[  781.984685][T13853] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  782.069841][T13853] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  782.130588][T13853] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  782.156340][T27725] bridge0: port 1(bridge_slave_0) entered blocking state
[  782.163520][T27725] bridge0: port 1(bridge_slave_0) entered disabled state
[  782.170974][T27725] bridge_slave_0: entered allmulticast mode
[  782.177620][T27725] bridge_slave_0: entered promiscuous mode
[  782.184761][T27725] bridge0: port 2(bridge_slave_1) entered blocking state
[  782.191975][T27725] bridge0: port 2(bridge_slave_1) entered disabled state
[  782.199185][T27725] bridge_slave_1: entered allmulticast mode
[  782.206043][T27725] bridge_slave_1: entered promiscuous mode
[  782.219697][T13853] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  782.231169][T27758] syzkaller0: entered promiscuous mode
[  782.236866][T27758] syzkaller0: entered allmulticast mode
[  782.257802][T27725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  782.269146][T27725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  782.291186][T27725] team0: Port device team_slave_0 added
[  782.298194][T27725] team0: Port device team_slave_1 added
[  782.324301][T27725] batman_adv: batadv0: Adding interface: batadv_slave_0
[  782.335921][T27725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  782.361962][T27725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  782.380945][T27725] batman_adv: batadv0: Adding interface: batadv_slave_1
[  782.388335][T27725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  782.414550][T27725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  782.457947][T13853] bridge_slave_1: left allmulticast mode
[  782.463816][T13853] bridge_slave_1: left promiscuous mode
[  782.470040][T13853] bridge0: port 2(bridge_slave_1) entered disabled state
[  782.477943][T13853] bridge_slave_0: left allmulticast mode
[  782.484053][T13853] bridge_slave_0: left promiscuous mode
[  782.492347][T13853] bridge0: port 1(bridge_slave_0) entered disabled state
[  782.552763][T13853] erspan0 (unregistering): left allmulticast mode
[  782.572269][T13853] bond1 (unregistering): (slave geneve2): Releasing active interface
[  782.580525][T13853] geneve2 (unregistering): left allmulticast mode
[  782.749599][T13853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  782.760019][T13853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  782.770311][T13853] bond0 (unregistering): Released all slaves
[  782.780188][T13853] bond1 (unregistering): Released all slaves
[  782.789430][T13853] bond2 (unregistering): Released all slaves
[  782.800224][T13853] bond3 (unregistering): Released all slaves
[  782.817591][T27725] hsr_slave_0: entered promiscuous mode
[  782.823772][T27725] hsr_slave_1: entered promiscuous mode
[  782.829878][T27725] debugfs: 'hsr0' already exists in 'hsr'
[  782.836049][T27725] Cannot create hsr debugfs directory
[  782.873261][T13853] tipc: Left network mode
[  782.897892][T13853] hsr_slave_0: left promiscuous mode
[  782.910582][T13853] hsr_slave_1: left promiscuous mode
[  782.916755][T13853] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  782.924679][T13853] batman_adv: batadv0: Removing interface: batadv_slave_0
[  782.938873][T13853] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  782.948466][T13853] batman_adv: batadv0: Removing interface: batadv_slave_1
[  782.989594][T13853] veth1_macvtap: left promiscuous mode
[  783.005085][T13853] veth0_macvtap: left promiscuous mode
[  783.028084][T13853] veth1_vlan: left promiscuous mode
[  783.042656][T13853] veth0_vlan: left promiscuous mode
[  783.118703][T13853] team0 (unregistering): Port device team_slave_1 removed
[  783.131655][T13853] team0 (unregistering): Port device team_slave_0 removed
[  783.177352][T27800] netlink: 'syz.7.8621': attribute type 12 has an invalid length.
[  783.185377][T27800] netlink: 'syz.7.8621': attribute type 29 has an invalid length.
[  783.193733][T27800] __nla_validate_parse: 6 callbacks suppressed
[  783.193773][T27800] netlink: 148 bytes leftover after parsing attributes in process `syz.7.8621'.
[  783.225511][T27803] syzkaller0: entered promiscuous mode
[  783.236216][T27803] syzkaller0: entered allmulticast mode
[  783.434477][   T28] audit: type=1400 audit(2000000827.470:833): avc:  denied  { write } for  pid=27813 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  783.444133][T13853] IPVS: stop unused estimator thread 0...
[  783.527299][   T28] audit: type=1400 audit(2000000827.564:834): avc:  denied  { write } for  pid=27839 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  783.670176][T27725] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  783.682034][T27725] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  783.699028][T27725] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  783.721225][T27725] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  783.735323][T27725] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  783.746521][T27725] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  783.754689][T27725] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  783.763926][T27725] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  783.771960][T27853] syzkaller0: entered promiscuous mode
[  783.782155][T27853] syzkaller0: entered allmulticast mode
[  783.793556][   T28] audit: type=1400 audit(2000000827.817:835): avc:  denied  { write } for  pid=27843 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  783.862960][   T28] audit: type=1400 audit(2000000827.854:836): avc:  denied  { write } for  pid=27859 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  783.928803][T27725] 8021q: adding VLAN 0 to HW filter on device bond0
[  783.942242][T27725] 8021q: adding VLAN 0 to HW filter on device team0
[  783.967481][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[  783.974678][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[  783.994893][T27725] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  784.005999][T27725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  784.023140][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[  784.030293][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[  784.206718][T27725] 8021q: adding VLAN 0 to HW filter on device batadv0
[  784.427386][T27725] veth0_vlan: entered promiscuous mode
[  784.444805][T27725] veth1_vlan: entered promiscuous mode
[  784.478654][T27725] veth0_macvtap: entered promiscuous mode
[  784.494794][T27725] veth1_macvtap: entered promiscuous mode
[  784.516103][T27725] batman_adv: batadv0: Interface activated: batadv_slave_0
[  784.537356][T27725] batman_adv: batadv0: Interface activated: batadv_slave_1
[  784.558604][   T66] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  784.576655][   T66] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  784.598062][   T66] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  784.625351][   T66] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  784.937233][T27927] syzkaller0: entered promiscuous mode
[  784.948687][T27927] syzkaller0: entered allmulticast mode
[  785.216066][T27959] syzkaller0: entered promiscuous mode
[  785.232588][T27959] syzkaller0: entered allmulticast mode
[  785.305539][T27973] program syz.3.8672 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  785.428413][T27981] syzkaller0: entered promiscuous mode
[  785.440297][T27981] syzkaller0: entered allmulticast mode
[  785.641730][T28001] syzkaller0: entered promiscuous mode
[  785.656388][T28001] syzkaller0: entered allmulticast mode
[  785.704446][T28003] syzkaller0: entered promiscuous mode
[  785.723603][T28003] syzkaller0: entered allmulticast mode
[  785.751712][T28006] netlink: 'syz.4.8687': attribute type 1 has an invalid length.
[  785.794049][T28014] syzkaller0: entered promiscuous mode
[  785.799673][T28014] syzkaller0: entered allmulticast mode
[  785.869570][T28017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  785.880351][T28017] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  786.355051][T28026] loop3: detected capacity change from 0 to 512
[  786.429550][T28043] syzkaller0: entered promiscuous mode
[  786.452397][T28043] syzkaller0: entered allmulticast mode
[  786.494879][T28026] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  786.618834][T28026] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  786.713603][T28026] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.8691: bad orphan inode 4
[  786.763494][T28026] loop3: lost filesystem error report for type 5 error -117
[  786.765281][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  786.779085][    C1] EXT4-fs (loop3): initial error at time 2000000830: ext4_orphan_get:1423
[  786.787658][    C1] EXT4-fs (loop3): last error at time 2000000830: ext4_orphan_get:1423
[  786.804370][T28026] EXT4-fs (loop3): 1 orphan inode deleted
[  786.833972][T28026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  786.972821][T28026] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 4: comm syz.3.8691: lblock 0 mapped to illegal pblock 4 (length 1)
[  787.060505][   T28] audit: type=1400 audit(2000000830.774:837): avc:  denied  { write } for  pid=28013 comm="syz.3.8691" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  787.128756][   T28] audit: type=1400 audit(2000000830.783:838): avc:  denied  { create } for  pid=28013 comm="syz.3.8691" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[  787.182832][T28080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  787.218550][T28080] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  787.318743][T28081] loop5: detected capacity change from 0 to 512
[  787.342497][T28081] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  787.368105][T28081] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  787.378441][T28081] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.8712: bad orphan inode 4
[  787.389445][T28081] loop5: lost filesystem error report for type 5 error -117
[  787.392653][T28081] EXT4-fs (loop5): 1 orphan inode deleted
[  787.400821][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  787.400999][    C0] EXT4-fs (loop5): initial error at time 2000000831: ext4_orphan_get:1423
[  787.401327][    C0] EXT4-fs (loop5): last error at time 2000000831: ext4_orphan_get:1423
[  787.439705][T28081] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  787.472648][T28081] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 4: comm syz.5.8712: lblock 0 mapped to illegal pblock 4 (length 1)
[  787.489398][   T28] audit: type=1400 audit(2000000831.251:839): avc:  denied  { write } for  pid=28059 comm="syz.5.8712" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  787.633673][T28084] loop1: detected capacity change from 0 to 512
[  787.663411][T28084] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  787.691583][T28084] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  787.723444][T28084] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.8713: bad orphan inode 4
[  787.776132][T28084] loop1: lost filesystem error report for type 5 error -117
[  787.777575][T28084] EXT4-fs (loop1): 1 orphan inode deleted
[  787.780445][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  787.799953][    C0] EXT4-fs (loop1): initial error at time 2000000831: ext4_orphan_get:1423
[  787.808554][    C0] EXT4-fs (loop1): last error at time 2000000831: ext4_orphan_get:1423
[  787.911490][T28092] syzkaller0: entered promiscuous mode
[  787.926417][T28092] syzkaller0: entered allmulticast mode
[  787.937602][T28084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  788.016483][T28083] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 4: comm syz.1.8713: lblock 0 mapped to illegal pblock 4 (length 1)
[  788.030533][   T28] audit: type=1400 audit(2000000831.775:840): avc:  denied  { write } for  pid=28072 comm="syz.1.8713" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  788.096663][T28098] syzkaller0: entered promiscuous mode
[  788.132075][T28098] syzkaller0: entered allmulticast mode
[  788.219650][T28105] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8724'.
[  788.253836][T28105] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8724'.
[  789.231533][T28123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  789.252621][T28123] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  789.383897][T28051] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  789.870269][T28133] syzkaller0: entered promiscuous mode
[  789.888346][T28133] syzkaller0: entered allmulticast mode
[  789.993886][T28137] TC_ACT_REPEAT abuse ?
[  790.411899][T22073] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  790.679719][T28149] netlink: 'syz.4.8740': attribute type 12 has an invalid length.
[  790.707868][T28149] netlink: 'syz.4.8740': attribute type 29 has an invalid length.
[  790.728109][T28149] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8740'.
[  791.017740][T28150] loop3: detected capacity change from 0 to 512
[  791.126397][T28150] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  791.183759][T28163] syzkaller0: entered promiscuous mode
[  791.206396][T28163] syzkaller0: entered allmulticast mode
[  791.220066][T28150] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  791.234461][T20977] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  791.245828][T28150] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.8738: bad orphan inode 4
[  791.263092][T28150] loop3: lost filesystem error report for type 5 error -117
[  791.266660][T28150] EXT4-fs (loop3): 1 orphan inode deleted
[  791.275400][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  791.275443][    C0] EXT4-fs (loop3): initial error at time 2000000834: ext4_orphan_get:1423
[  791.275894][    C0] EXT4-fs (loop3): last error at time 2000000834: ext4_orphan_get:1423
[  791.340761][T28150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  791.384893][T21186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  791.430990][T28175] netlink: 'syz.7.8751': attribute type 12 has an invalid length.
[  791.467374][T28175] netlink: 'syz.7.8751': attribute type 29 has an invalid length.
[  791.489037][   T28] audit: type=1400 audit(2000000835.013:841): avc:  denied  { write } for  pid=28145 comm="syz.3.8738" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  791.491609][T28150] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 4: comm syz.3.8738: lblock 0 mapped to illegal pblock 4 (length 1)
[  791.528791][T28175] netlink: 148 bytes leftover after parsing attributes in process `syz.7.8751'.
[  791.545942][T28183] syzkaller0: entered promiscuous mode
[  791.591332][T28183] syzkaller0: entered allmulticast mode
[  791.644189][T28189] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  791.662803][T28189] syzkaller0: entered promiscuous mode
[  791.693266][T28189] syzkaller0: entered allmulticast mode
[  791.734521][T28202] tipc: Resetting bearer <eth:syzkaller0>
[  791.768873][T28188] tipc: Resetting bearer <eth:syzkaller0>
[  791.813714][T28188] tipc: Disabling bearer <eth:syzkaller0>
[  791.938159][T28216] netlink: 'syz.7.8764': attribute type 12 has an invalid length.
[  791.964790][T28216] netlink: 'syz.7.8764': attribute type 29 has an invalid length.
[  791.987347][T28216] netlink: 148 bytes leftover after parsing attributes in process `syz.7.8764'.
[  792.442774][T28225] loop4: detected capacity change from 0 to 512
[  792.507504][T28225] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  792.559940][T28226] loop7: detected capacity change from 0 to 512
[  792.579098][T28225] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  792.603335][T28225] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.8760: bad orphan inode 4
[  792.625283][T28225] loop4: lost filesystem error report for type 5 error -117
[  792.629813][T28225] EXT4-fs (loop4): 1 orphan inode deleted
[  792.638073][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  792.638233][    C1] EXT4-fs (loop4): initial error at time 2000000836: ext4_orphan_get:1423
[  792.638308][    C1] EXT4-fs (loop4): last error at time 2000000836: ext4_orphan_get:1423
[  792.677187][T28225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  792.701248][T28226] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  792.744969][T28225] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 4: comm syz.4.8760: lblock 0 mapped to illegal pblock 4 (length 1)
[  792.761463][   T28] audit: type=1400 audit(2000000836.173:842): avc:  denied  { write } for  pid=28206 comm="syz.4.8760" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  792.882082][T28226] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  792.957099][T28226] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.8766: bad orphan inode 4
[  793.033725][T28226] loop7: lost filesystem error report for type 5 error -117
[  793.038180][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  793.052011][    C0] EXT4-fs (loop7): initial error at time 2000000836: ext4_orphan_get:1423
[  793.060571][    C0] EXT4-fs (loop7): last error at time 2000000836: ext4_orphan_get:1423
[  793.074957][T28226] EXT4-fs (loop7): 1 orphan inode deleted
[  793.104326][T28226] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  793.210633][   T28] audit: type=1400 audit(2000000836.623:843): avc:  denied  { write } for  pid=28218 comm="syz.7.8766" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  793.226756][T28226] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #2: block 4: comm syz.7.8766: lblock 0 mapped to illegal pblock 4 (length 1)
[  793.674914][T28256] loop5: detected capacity change from 0 to 512
[  793.710170][T28256] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  793.750475][T28256] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  793.761422][T28256] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.8774: bad orphan inode 4
[  793.771998][T28256] loop5: lost filesystem error report for type 5 error -117
[  793.774547][T28256] EXT4-fs (loop5): 1 orphan inode deleted
[  793.782643][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  793.782692][    C1] EXT4-fs (loop5): initial error at time 2000000837: ext4_orphan_get:1423
[  793.783239][    C1] EXT4-fs (loop5): last error at time 2000000837: ext4_orphan_get:1423
[  793.825564][T28256] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  793.851581][T28256] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 4: comm syz.5.8774: lblock 0 mapped to illegal pblock 4 (length 1)
[  794.015747][   T28] audit: type=1400 audit(2000000837.221:844): avc:  denied  { write } for  pid=28253 comm="syz.5.8774" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  794.044524][T28051] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  794.145723][T28051] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  794.206325][T28260] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  794.236265][T28260] syzkaller0: entered promiscuous mode
[  794.254714][T28260] syzkaller0: entered allmulticast mode
[  794.314219][T28261] tipc: Resetting bearer <eth:syzkaller0>
[  794.416767][T28259] tipc: Resetting bearer <eth:syzkaller0>
[  794.425705][T28259] tipc: Disabling bearer <eth:syzkaller0>
[  794.517118][T28263] netlink: 'syz.1.8776': attribute type 12 has an invalid length.
[  794.535904][T28263] netlink: 'syz.1.8776': attribute type 29 has an invalid length.
[  794.554108][T28263] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8776'.
[  794.563523][T28051] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  794.632338][T28265] program syz.1.8777 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  794.925605][T22073] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  795.198751][T21186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  795.309339][T28269] loop5: detected capacity change from 0 to 1024
[  795.342980][T28269] EXT4-fs: Ignoring removed bh option
[  795.405085][T28269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  795.509133][T21186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  795.568964][T28278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  795.595405][T28278] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  795.850205][T28280] loop3: detected capacity change from 0 to 512
[  795.871928][T28280] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  795.894168][T28280] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  795.907881][T28280] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.8778: bad orphan inode 4
[  795.918941][T28280] loop3: lost filesystem error report for type 5 error -117
[  795.921094][T28280] EXT4-fs (loop3): 1 orphan inode deleted
[  795.929058][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  795.929298][    C0] EXT4-fs (loop3): initial error at time 2000000839: ext4_orphan_get:1423
[  795.929897][    C0] EXT4-fs (loop3): last error at time 2000000839: ext4_orphan_get:1423
[  795.969298][T28280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  795.999309][   T28] audit: type=1400 audit(2000000839.233:845): avc:  denied  { write } for  pid=28266 comm="syz.3.8778" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  796.001123][T28280] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 4: comm syz.3.8778: lblock 0 mapped to illegal pblock 4 (length 1)
[  796.532432][T28301] netlink: 'syz.5.8787': attribute type 12 has an invalid length.
[  796.555505][T28301] netlink: 'syz.5.8787': attribute type 29 has an invalid length.
[  796.581257][T28301] netlink: 148 bytes leftover after parsing attributes in process `syz.5.8787'.
[  796.786628][T28308] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8790'.
[  796.906179][T28312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  796.934432][T28312] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  796.959979][T28312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  796.986621][T28312] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  797.370233][T28314] loop5: detected capacity change from 0 to 512
[  797.441477][T28314] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  797.514799][T28314] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  797.570461][T28314] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.8788: bad orphan inode 4
[  797.615251][T28314] loop5: lost filesystem error report for type 5 error -117
[  797.616820][T27725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  797.663744][T28314] EXT4-fs (loop5): 1 orphan inode deleted
[  797.670415][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  797.670453][    C0] EXT4-fs (loop5): initial error at time 2000000840: ext4_orphan_get:1423
[  797.670552][    C0] EXT4-fs (loop5): last error at time 2000000840: ext4_orphan_get:1423
[  797.714771][T28317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  797.723289][T28317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  797.738755][T28314] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  797.770749][T28314] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 4: comm syz.5.8788: lblock 0 mapped to illegal pblock 4 (length 1)
[  797.774689][   T28] audit: type=1400 audit(2000000840.899:846): avc:  denied  { write } for  pid=28303 comm="syz.5.8788" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  798.315635][T23262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  798.353277][T28324] program syz.7.8795 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  798.786750][T28338] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8801'.
[  798.850223][T28340] syzkaller0: entered promiscuous mode
[  798.856955][T28340] syzkaller0: entered allmulticast mode
[  799.058741][T28346] netlink: 68 bytes leftover after parsing attributes in process `syz.7.8805'.
[  799.178254][T22073] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  799.576384][T28355] xt_connbytes: Forcing CT accounting to be enabled
[  799.585887][T28355] xt_CT: You must specify a L4 protocol and not use inversions on it
[  799.609506][T28364] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8812'.
[  799.657119][T21186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  799.724672][T28373] netlink: 68 bytes leftover after parsing attributes in process `syz.7.8816'.
[  799.737115][T28375] syzkaller0: entered promiscuous mode
[  799.743831][T28375] syzkaller0: entered allmulticast mode
[  800.080261][T28384] loop7: detected capacity change from 0 to 512
[  800.147407][T28384] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  800.188176][T28384] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  800.201958][T28384] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.8818: bad orphan inode 4
[  800.212907][T28384] loop7: lost filesystem error report for type 5 error -117
[  800.214570][T28384] EXT4-fs (loop7): 1 orphan inode deleted
[  800.222810][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  800.222959][    C0] EXT4-fs (loop7): initial error at time 2000000843: ext4_orphan_get:1423
[  800.223568][    C0] EXT4-fs (loop7): last error at time 2000000843: ext4_orphan_get:1423
[  800.286413][T28384] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  800.322913][T28384] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #2: block 4: comm syz.7.8818: lblock 0 mapped to illegal pblock 4 (length 1)
[  800.323640][   T28] audit: type=1400 audit(2000000843.285:847): avc:  denied  { write } for  pid=28376 comm="syz.7.8818" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  800.386602][T28395] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8824'.
[  800.535697][T28408] syzkaller0: entered promiscuous mode
[  800.550191][T28408] syzkaller0: entered allmulticast mode
[  800.661636][T28414] TC_ACT_REPEAT abuse ?
[  801.159796][T28430] loop3: detected capacity change from 0 to 7
[  801.208639][T28432] netlink: 'syz.5.8837': attribute type 1 has an invalid length.
[  801.298515][T28436] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8839'.
[  801.356246][T28440] program syz.5.8841 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  801.432973][T28442] syzkaller0: entered promiscuous mode
[  801.438617][T28442] syzkaller0: entered allmulticast mode
[  801.782942][T28444] loop5: detected capacity change from 0 to 512
[  801.798514][T28444] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  801.819992][T28444] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  801.839173][T28444] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.8843: bad orphan inode 4
[  801.850372][T28444] loop5: lost filesystem error report for type 5 error -117
[  801.852447][T28444] EXT4-fs (loop5): 1 orphan inode deleted
[  801.860610][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  801.860654][    C1] EXT4-fs (loop5): initial error at time 2000000844: ext4_orphan_get:1423
[  801.861144][    C1] EXT4-fs (loop5): last error at time 2000000844: ext4_orphan_get:1423
[  801.895397][T28444] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  801.924720][T28444] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 4: comm syz.5.8843: lblock 0 mapped to illegal pblock 4 (length 1)
[  801.943118][   T28] audit: type=1400 audit(2000000844.783:848): avc:  denied  { write } for  pid=28443 comm="syz.5.8843" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  802.093722][T28451] TC_ACT_REPEAT abuse ?
[  802.260648][T28453] loop1: detected capacity change from 0 to 1024
[  802.278322][T28453] EXT4-fs: Ignoring removed bh option
[  802.294098][T28453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  802.324632][T23262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  802.380706][T20977] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  802.420121][T28461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  802.431249][T28461] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  802.533902][T21186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  802.716284][T28478] program syz.4.8854 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  802.753250][T28478] team0: entered promiscuous mode
[  802.758436][T28478] team_slave_0: entered promiscuous mode
[  802.764751][T28478] team_slave_1: entered promiscuous mode
[  803.006079][T28484] loop5: detected capacity change from 0 to 512
[  803.033413][T28484] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  803.072839][T28484] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  803.089387][T28484] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.8855: bad orphan inode 4
[  803.100263][T28484] loop5: lost filesystem error report for type 5 error -117
[  803.103672][T28484] EXT4-fs (loop5): 1 orphan inode deleted
[  803.111705][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  803.111991][    C1] EXT4-fs (loop5): initial error at time 2000000845: ext4_orphan_get:1423
[  803.112400][    C1] EXT4-fs (loop5): last error at time 2000000845: ext4_orphan_get:1423
[  803.162798][T28484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  803.192590][T28484] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 4: comm syz.5.8855: lblock 0 mapped to illegal pblock 4 (length 1)
[  803.211736][   T28] audit: type=1400 audit(2000000845.962:849): avc:  denied  { write } for  pid=28476 comm="syz.5.8855" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  803.412414][T28494] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8861'.
[  803.892682][T28416] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  804.007583][T28524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  804.058105][T28524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  804.069822][T28522] xt_connbytes: Forcing CT accounting to be enabled
[  804.091835][T28522] xt_CT: You must specify a L4 protocol and not use inversions on it
[  804.442176][T28532] loop7: detected capacity change from 0 to 512
[  804.467234][T28532] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  804.536725][T28532] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  804.549020][T28532] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.8870: bad orphan inode 4
[  804.560758][T28532] loop7: lost filesystem error report for type 5 error -117
[  804.562306][T28532] EXT4-fs (loop7): 1 orphan inode deleted
[  804.570038][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  804.570284][    C0] EXT4-fs (loop7): initial error at time 2000000847: ext4_orphan_get:1423
[  804.570423][    C0] EXT4-fs (loop7): last error at time 2000000847: ext4_orphan_get:1423
[  804.614178][T28532] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  804.643962][T28532] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #2: block 4: comm syz.7.8870: lblock 0 mapped to illegal pblock 4 (length 1)
[  804.816393][T21186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  804.831880][   T28] audit: type=1400 audit(2000000847.328:850): avc:  denied  { write } for  pid=28529 comm="syz.7.8870" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  804.970393][T28536] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8872'.
[  805.531544][T28573] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8880'.
[  805.551459][T28573] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8880'.
[  806.042691][T28579] loop3: detected capacity change from 0 to 512
[  806.060416][T28579] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  806.083885][T28579] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  806.095184][T28579] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.8881: bad orphan inode 4
[  806.105736][T28579] loop3: lost filesystem error report for type 5 error -117
[  806.107004][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  806.120754][    C0] EXT4-fs (loop3): initial error at time 2000000848: ext4_orphan_get:1423
[  806.129298][    C0] EXT4-fs (loop3): last error at time 2000000848: ext4_orphan_get:1423
[  806.146660][T28579] EXT4-fs (loop3): 1 orphan inode deleted
[  806.162654][T28579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  806.198725][T28579] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 4: comm syz.3.8881: lblock 0 mapped to illegal pblock 4 (length 1)
[  806.207375][   T28] audit: type=1400 audit(2000000848.788:851): avc:  denied  { write } for  pid=28576 comm="syz.3.8881" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  806.379770][T23262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  806.774616][T28585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  806.789480][T28583] program syz.1.8883 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  806.805087][T28585] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  806.869767][T28583] team0: entered promiscuous mode
[  806.891590][T28583] team_slave_0: entered promiscuous mode
[  806.913138][T28583] team_slave_1: entered promiscuous mode
[  807.222764][T28592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  807.233279][T28592] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  807.244922][T28592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  807.274793][T28592] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  807.710491][T22073] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  807.754884][T28601] loop7: detected capacity change from 0 to 512
[  807.779897][T28601] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  807.857801][T28601] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  807.873723][T28601] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.8882: bad orphan inode 4
[  807.887532][T28601] loop7: lost filesystem error report for type 5 error -117
[  807.889595][T28601] EXT4-fs (loop7): 1 orphan inode deleted
[  807.897473][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  807.897516][    C0] EXT4-fs (loop7): initial error at time 2000000850: ext4_orphan_get:1423
[  807.897813][    C0] EXT4-fs (loop7): last error at time 2000000850: ext4_orphan_get:1423
[  807.940759][T28601] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  807.976565][T28601] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #2: block 4: comm syz.7.8882: lblock 0 mapped to illegal pblock 4 (length 1)
[  808.009353][   T28] audit: type=1400 audit(2000000850.444:852): avc:  denied  { write } for  pid=28593 comm="syz.7.8882" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  809.218494][T23262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  809.256583][T28632] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8897'.
[  809.265798][T28632] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8897'.
[  809.937639][T28639] loop3: detected capacity change from 0 to 512
[  809.972733][T28639] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  810.073842][T28646] loop7: detected capacity change from 0 to 512
[  810.103841][T28646] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  810.121661][T28646] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  810.135635][T28646] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.8901: bad orphan inode 4
[  810.146289][T28646] loop7: lost filesystem error report for type 5 error -117
[  810.147023][T28646] EXT4-fs (loop7): 1 orphan inode deleted
[  810.160927][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  810.160983][    C0] EXT4-fs (loop7): initial error at time 2000000852: ext4_orphan_get:1423
[  810.161453][    C0] EXT4-fs (loop7): last error at time 2000000852: ext4_orphan_get:1423
[  810.192947][T28646] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  810.230316][T28646] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #2: block 4: comm syz.7.8901: lblock 0 mapped to illegal pblock 4 (length 1)
[  810.232027][   T28] audit: type=1400 audit(2000000852.559:853): avc:  denied  { write } for  pid=28643 comm="syz.7.8901" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  810.280966][T28645] loop1: detected capacity change from 0 to 512
[  810.350194][T28639] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  810.374775][T28645] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  810.392907][T28639] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.8898: bad orphan inode 4
[  810.430076][T28639] loop3: lost filesystem error report for type 5 error -117
[  810.434857][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  810.448661][    C1] EXT4-fs (loop3): initial error at time 2000000852: ext4_orphan_get:1423
[  810.457203][    C1] EXT4-fs (loop3): last error at time 2000000852: ext4_orphan_get:1423
[  810.477506][T28639] EXT4-fs (loop3): 1 orphan inode deleted
[  810.502601][T28645] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  810.521884][T28652] loop5: detected capacity change from 0 to 1024
[  810.531458][T28639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  810.549236][T28652] EXT4-fs: Ignoring removed bh option
[  810.559984][T28645] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.8899: bad orphan inode 4
[  810.569882][   T28] audit: type=1400 audit(2000000852.877:854): avc:  denied  { write } for  pid=28634 comm="syz.3.8898" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  810.578199][T28639] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 4: comm syz.3.8898: lblock 0 mapped to illegal pblock 4 (length 1)
[  810.618838][T28645] loop1: lost filesystem error report for type 5 error -117
[  810.619440][T28645] EXT4-fs (loop1): 1 orphan inode deleted
[  810.627695][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  810.627977][    C1] EXT4-fs (loop1): initial error at time 2000000852: ext4_orphan_get:1423
[  810.628571][    C1] EXT4-fs (loop1): last error at time 2000000852: ext4_orphan_get:1423
[  810.670884][T28652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  810.672813][T28596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  810.688662][T28645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  810.718336][   T28] audit: type=1400 audit(2000000853.018:855): avc:  denied  { write } for  pid=28637 comm="syz.1.8899" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  810.744330][T28645] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 4: comm syz.1.8899: lblock 0 mapped to illegal pblock 4 (length 1)
[  810.820578][T23262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  810.884482][T21186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  811.219600][T28671] loop7: detected capacity change from 0 to 512
[  811.236258][T28671] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  811.325305][T28671] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  811.337707][T28671] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.8903: bad orphan inode 4
[  811.348821][T28671] loop7: lost filesystem error report for type 5 error -117
[  811.351487][T28671] EXT4-fs (loop7): 1 orphan inode deleted
[  811.361457][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  811.361604][    C1] EXT4-fs (loop7): initial error at time 2000000853: ext4_orphan_get:1423
[  811.361703][    C1] EXT4-fs (loop7): last error at time 2000000853: ext4_orphan_get:1423
[  811.400246][T28671] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  811.432806][T28671] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #2: block 4: comm syz.7.8903: lblock 0 mapped to illegal pblock 4 (length 1)
[  811.450861][   T28] audit: type=1400 audit(2000000853.682:856): avc:  denied  { write } for  pid=28660 comm="syz.7.8903" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  812.723106][T28051] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  812.746840][T23262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  813.145824][T28694] loop7: detected capacity change from 0 to 512
[  813.164918][T28694] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  813.186658][T28694] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  813.198922][T28694] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.8912: bad orphan inode 4
[  813.210104][T28694] loop7: lost filesystem error report for type 5 error -117
[  813.211567][T28694] EXT4-fs (loop7): 1 orphan inode deleted
[  813.219892][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  813.219975][    C1] EXT4-fs (loop7): initial error at time 2000000855: ext4_orphan_get:1423
[  813.220223][    C1] EXT4-fs (loop7): last error at time 2000000855: ext4_orphan_get:1423
[  813.260110][T28694] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  813.292151][T28694] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #2: block 4: comm syz.7.8912: lblock 0 mapped to illegal pblock 4 (length 1)
[  813.437846][   T28] audit: type=1400 audit(2000000855.423:857): avc:  denied  { write } for  pid=28683 comm="syz.7.8912" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  813.471499][T28051] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  814.424115][T28701] loop4: detected capacity change from 0 to 512
[  814.568896][T28701] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  814.770817][T23262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  814.814253][T28701] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  814.892563][T28705] loop5: detected capacity change from 0 to 512
[  814.958472][T28705] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  814.977758][T28701] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.8915: bad orphan inode 4
[  815.018717][T28705] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  815.030057][T28705] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.8916: bad orphan inode 4
[  815.040305][T28705] loop5: lost filesystem error report for type 5 error -117
[  815.043032][T28705] EXT4-fs (loop5): 1 orphan inode deleted
[  815.051249][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  815.051334][    C0] EXT4-fs (loop5): initial error at time 2000000857: ext4_orphan_get:1423
[  815.051482][    C0] EXT4-fs (loop5): last error at time 2000000857: ext4_orphan_get:1423
[  815.094604][T28705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  815.118168][T28705] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 4: comm syz.5.8916: lblock 0 mapped to illegal pblock 4 (length 1)
[  815.239713][   T28] audit: type=1400 audit(2000000857.126:858): avc:  denied  { write } for  pid=28699 comm="syz.5.8916" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  815.295637][T28701] loop4: lost filesystem error report for type 5 error -117
[  815.304809][T28701] EXT4-fs (loop4): 1 orphan inode deleted
[  815.312312][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  815.312354][    C0] EXT4-fs (loop4): initial error at time 2000000857: ext4_orphan_get:1423
[  815.312506][    C0] EXT4-fs (loop4): last error at time 2000000857: ext4_orphan_get:1423
[  815.533457][T28701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  815.635690][   T28] audit: type=1400 audit(2000000857.603:859): avc:  denied  { write } for  pid=28697 comm="syz.4.8915" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  815.667644][T28701] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 4: comm syz.4.8915: lblock 0 mapped to illegal pblock 4 (length 1)
[  816.349407][T28712] loop7: detected capacity change from 0 to 512
[  816.378735][T28712] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  816.426310][T28712] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  816.438415][T28712] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.8917: bad orphan inode 4
[  816.449492][T28712] loop7: lost filesystem error report for type 5 error -117
[  816.461777][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  816.475567][    C0] EXT4-fs (loop7): initial error at time 2000000858: ext4_orphan_get:1423
[  816.484125][    C0] EXT4-fs (loop7): last error at time 2000000858: ext4_orphan_get:1423
[  816.499781][T28712] EXT4-fs (loop7): 1 orphan inode deleted
[  816.515625][T28712] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  816.548620][T28712] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #2: block 4: comm syz.7.8917: lblock 0 mapped to illegal pblock 4 (length 1)
[  816.564653][   T28] audit: type=1400 audit(2000000858.464:860): avc:  denied  { write } for  pid=28709 comm="syz.7.8917" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  817.017630][T21186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  817.287220][T22073] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  817.974022][T23262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  817.993834][T28719] syzkaller0: entered promiscuous mode
[  818.012173][T28719] syzkaller0: entered allmulticast mode
[  818.084527][T28721] loop5: detected capacity change from 0 to 512
[  818.110248][T28721] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  818.134053][T28721] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  818.146741][T28721] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.8918: bad orphan inode 4
[  818.157640][T28721] loop5: lost filesystem error report for type 5 error -117
[  818.159063][T28721] EXT4-fs (loop5): 1 orphan inode deleted
[  818.167645][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  818.167759][    C1] EXT4-fs (loop5): initial error at time 2000000859: ext4_orphan_get:1423
[  818.168108][    C1] EXT4-fs (loop5): last error at time 2000000859: ext4_orphan_get:1423
[  818.217100][T28721] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  818.247270][T28721] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 4: comm syz.5.8918: lblock 0 mapped to illegal pblock 4 (length 1)
[  818.263673][   T28] audit: type=1400 audit(2000000860.055:861): avc:  denied  { write } for  pid=28716 comm="syz.5.8918" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  818.466364][T28734] program syz.3.8922 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  818.829877][T21186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  818.953064][T28744] loop3: detected capacity change from 0 to 512
[  818.977987][T28744] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  818.999199][T28744] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  819.016048][T28744] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.8926: bad orphan inode 4
[  819.027528][T28744] loop3: lost filesystem error report for type 5 error -117
[  819.028682][T28744] EXT4-fs (loop3): 1 orphan inode deleted
[  819.042679][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  819.042828][    C0] EXT4-fs (loop3): initial error at time 2000000860: ext4_orphan_get:1423
[  819.042997][    C0] EXT4-fs (loop3): last error at time 2000000860: ext4_orphan_get:1423
[  819.081427][T28744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  819.109931][T28744] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 4: comm syz.3.8926: lblock 0 mapped to illegal pblock 4 (length 1)
[  819.123966][   T28] audit: type=1400 audit(2000000860.869:862): avc:  denied  { write } for  pid=28742 comm="syz.3.8926" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  819.154706][T28051] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  819.754150][T28756] loop7: detected capacity change from 0 to 512
[  820.626744][T28756] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  820.638635][T20977] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  820.657973][T28756] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  820.674265][T28756] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.8929: bad orphan inode 4
[  820.685201][T28756] loop7: lost filesystem error report for type 5 error -117
[  820.688956][T22073] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  820.696379][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  820.696416][    C1] EXT4-fs (loop7): initial error at time 2000000862: ext4_orphan_get:1423
[  820.696445][    C1] EXT4-fs (loop7): last error at time 2000000862: ext4_orphan_get:1423
[  820.746804][T28752] loop5: detected capacity change from 0 to 512
[  820.775495][T28756] EXT4-fs (loop7): 1 orphan inode deleted
[  820.789467][T28756] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  820.818276][T28756] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #2: block 4: comm syz.7.8929: lblock 0 mapped to illegal pblock 4 (length 1)
[  820.833993][   T28] audit: type=1400 audit(2000000862.469:863): avc:  denied  { write } for  pid=28753 comm="syz.7.8929" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  821.024684][T28752] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  821.287806][T28752] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  821.311458][T28752] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.8928: bad orphan inode 4
[  821.327037][T28051] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  821.352760][T28752] loop5: lost filesystem error report for type 5 error -117
[  821.354101][T28752] EXT4-fs (loop5): 1 orphan inode deleted
[  821.363759][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  821.363825][    C1] EXT4-fs (loop5): initial error at time 2000000862: ext4_orphan_get:1423
[  821.364082][    C1] EXT4-fs (loop5): last error at time 2000000862: ext4_orphan_get:1423
[  821.458219][T28752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  821.518832][   T28] audit: type=1400 audit(2000000863.124:864): avc:  denied  { write } for  pid=28747 comm="syz.5.8928" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  821.543654][T28752] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 4: comm syz.5.8928: lblock 0 mapped to illegal pblock 4 (length 1)
[  821.584130][T23262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  821.927792][T28769] loop1: detected capacity change from 0 to 512
[  821.952194][T28769] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  821.982495][T28769] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  821.992887][T28769] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.8930: bad orphan inode 4
[  822.003590][T28769] loop1: lost filesystem error report for type 5 error -117
[  822.005297][T28769] EXT4-fs (loop1): 1 orphan inode deleted
[  822.013116][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  822.013237][    C1] EXT4-fs (loop1): initial error at time 2000000863: ext4_orphan_get:1423
[  822.013513][    C1] EXT4-fs (loop1): last error at time 2000000863: ext4_orphan_get:1423
[  822.052227][T28769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  822.084259][T28769] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 4: comm syz.1.8930: lblock 0 mapped to illegal pblock 4 (length 1)
[  822.226484][   T28] audit: type=1400 audit(2000000863.648:865): avc:  denied  { write } for  pid=28761 comm="syz.1.8930" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  822.873234][T28774] TC_ACT_REPEAT abuse ?
[  822.992079][T27725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  823.584793][T20977] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  823.819379][T28793] loop7: detected capacity change from 0 to 512
[  823.836828][T28793] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  824.662882][T28051] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  825.200403][T28795] loop1: detected capacity change from 0 to 512
[  825.908622][T28795] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  825.923241][T28793] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  826.860179][T28793] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.8940: bad orphan inode 4
[  826.977021][T28793] loop7: lost filesystem error report for type 5 error -117
[  826.987589][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  827.001354][    C0] EXT4-fs (loop7): initial error at time 2000000868: ext4_orphan_get:1423
[  827.009891][    C0] EXT4-fs (loop7): last error at time 2000000868: ext4_orphan_get:1423
[  827.119978][T28795] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  827.132567][T28793] EXT4-fs (loop7): 1 orphan inode deleted
[  827.143192][T28793] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  827.217455][T28795] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.8941: bad orphan inode 4
[  827.228617][T28795] loop1: lost filesystem error report for type 5 error -117
[  827.233098][T28795] EXT4-fs (loop1): 1 orphan inode deleted
[  827.247084][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  827.247394][    C0] EXT4-fs (loop1): initial error at time 2000000868: ext4_orphan_get:1423
[  827.247651][    C0] EXT4-fs (loop1): last error at time 2000000868: ext4_orphan_get:1423
[  827.279280][T28795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  827.448352][T28808] loop4: detected capacity change from 0 to 512
[  827.464518][T28808] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  827.478975][T23262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  827.503188][T28808] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  827.515975][T28808] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.8944: bad orphan inode 4
[  827.528518][T28808] loop4: lost filesystem error report for type 5 error -117
[  827.532516][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  827.546395][    C1] EXT4-fs (loop4): initial error at time 2000000868: ext4_orphan_get:1423
[  827.554952][    C1] EXT4-fs (loop4): last error at time 2000000868: ext4_orphan_get:1423
[  827.564656][T20977] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  827.574348][T28808] EXT4-fs (loop4): 1 orphan inode deleted
[  827.589772][T28808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  827.621501][T28808] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 4: comm syz.4.8944: lblock 0 mapped to illegal pblock 4 (length 1)
[  827.646828][   T28] audit: type=1400 audit(2000000868.833:866): avc:  denied  { write } for  pid=28803 comm="syz.4.8944" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  827.790331][T21186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  828.994669][T28828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  829.003958][T28828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  829.049189][T28823] loop7: detected capacity change from 0 to 512
[  829.074521][T28823] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  829.152237][T28823] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  829.164837][T28823] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.8945: bad orphan inode 4
[  829.175186][T28823] loop7: lost filesystem error report for type 5 error -117
[  829.176626][T28823] EXT4-fs (loop7): 1 orphan inode deleted
[  829.184555][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  829.184625][    C0] EXT4-fs (loop7): initial error at time 2000000870: ext4_orphan_get:1423
[  829.184691][    C0] EXT4-fs (loop7): last error at time 2000000870: ext4_orphan_get:1423
[  829.223408][T28823] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  829.255757][T28823] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #2: block 4: comm syz.7.8945: lblock 0 mapped to illegal pblock 4 (length 1)
[  829.402023][T27725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  829.424026][   T28] audit: type=1400 audit(2000000870.358:867): avc:  denied  { write } for  pid=28818 comm="syz.7.8945" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  829.454117][T28828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  829.499140][T28815] loop3: detected capacity change from 0 to 512
[  829.506711][T28828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  829.729476][T28815] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  829.918595][T28815] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  829.933898][T28815] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.8943: bad orphan inode 4
[  829.945105][T28815] loop3: lost filesystem error report for type 5 error -117
[  829.947424][T28815] EXT4-fs (loop3): 1 orphan inode deleted
[  829.947713][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  829.947905][    C0] EXT4-fs (loop3): initial error at time 2000000871: ext4_orphan_get:1423
[  829.948150][    C0] EXT4-fs (loop3): last error at time 2000000871: ext4_orphan_get:1423
[  830.308564][T28815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  830.574853][T28837] loop5: detected capacity change from 0 to 512
[  830.750691][T28837] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  830.782993][T28837] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  830.794398][T28837] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.8952: bad orphan inode 4
[  830.804986][T28837] loop5: lost filesystem error report for type 5 error -117
[  830.806548][T28837] EXT4-fs (loop5): 1 orphan inode deleted
[  830.814719][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  830.814831][    C0] EXT4-fs (loop5): initial error at time 2000000871: ext4_orphan_get:1423
[  830.814935][    C0] EXT4-fs (loop5): last error at time 2000000871: ext4_orphan_get:1423
[  830.858699][T28837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  830.890324][T28837] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 4: comm syz.5.8952: lblock 0 mapped to illegal pblock 4 (length 1)
[  830.910001][   T28] audit: type=1400 audit(2000000871.893:868): avc:  denied  { write } for  pid=28834 comm="syz.5.8952" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  831.092150][T23262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  831.155862][   T28] audit: type=1400 audit(2000000872.127:869): avc:  denied  { write } for  pid=28805 comm="syz.3.8943" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  831.367090][T28815] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 4: comm syz.3.8943: lblock 0 mapped to illegal pblock 4 (length 1)
[  832.130680][T28852] loop7: detected capacity change from 0 to 512
[  832.160875][T28852] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  832.190456][T21186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  832.211956][T28852] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  832.230758][T28852] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.8953: bad orphan inode 4
[  832.242968][T28852] loop7: lost filesystem error report for type 5 error -117
[  832.243927][T28852] EXT4-fs (loop7): 1 orphan inode deleted
[  832.251688][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  832.251892][    C1] EXT4-fs (loop7): initial error at time 2000000873: ext4_orphan_get:1423
[  832.252052][    C1] EXT4-fs (loop7): last error at time 2000000873: ext4_orphan_get:1423
[  832.290376][T28852] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  832.323762][T28852] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #2: block 4: comm syz.7.8953: lblock 0 mapped to illegal pblock 4 (length 1)
[  832.462386][   T28] audit: type=1400 audit(2000000873.231:870): avc:  denied  { write } for  pid=28846 comm="syz.7.8953" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  832.984134][T28864] program syz.4.8959 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  833.681605][T28866] loop5: detected capacity change from 0 to 512
[  833.712723][T28866] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  833.750730][T28866] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  833.763461][T28866] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.8958: bad orphan inode 4
[  833.774256][T28866] loop5: lost filesystem error report for type 5 error -117
[  833.775384][T28866] EXT4-fs (loop5): 1 orphan inode deleted
[  833.789374][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  833.789418][    C1] EXT4-fs (loop5): initial error at time 2000000874: ext4_orphan_get:1423
[  833.789523][    C1] EXT4-fs (loop5): last error at time 2000000874: ext4_orphan_get:1423
[  833.825655][T28866] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  833.858471][T28866] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 4: comm syz.5.8958: lblock 0 mapped to illegal pblock 4 (length 1)
[  833.972949][T22073] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  834.002691][T23262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  834.032771][   T28] audit: type=1400 audit(2000000874.663:871): avc:  denied  { write } for  pid=28860 comm="syz.5.8958" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  834.719658][T28875] syzkaller0: entered promiscuous mode
[  834.728872][T28873] TC_ACT_REPEAT abuse ?
[  834.738047][T28875] syzkaller0: entered allmulticast mode
[  835.082574][T28881] loop4: detected capacity change from 0 to 512
[  835.099737][T28881] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  835.120192][T28881] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  835.132130][T28881] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.8963: bad orphan inode 4
[  835.142430][T28881] loop4: lost filesystem error report for type 5 error -117
[  835.144251][T28881] EXT4-fs (loop4): 1 orphan inode deleted
[  835.152091][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  835.152115][    C1] EXT4-fs (loop4): initial error at time 2000000875: ext4_orphan_get:1423
[  835.152146][    C1] EXT4-fs (loop4): last error at time 2000000875: ext4_orphan_get:1423
[  835.191656][T28881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  835.226439][T28881] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 4: comm syz.4.8963: lblock 0 mapped to illegal pblock 4 (length 1)
[  835.245826][   T28] audit: type=1400 audit(2000000875.945:872): avc:  denied  { write } for  pid=28878 comm="syz.4.8963" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  835.410261][T21186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  835.648775][T28888] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8965'.
[  835.963389][T28892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  835.991562][T28892] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  836.154356][T28892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  836.173975][T28892] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  836.683024][T27725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  836.738534][T28896] loop1: detected capacity change from 0 to 512
[  836.792905][T28896] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  837.036711][T28896] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  837.826856][T28896] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.8968: bad orphan inode 4
[  838.006796][T28896] loop1: lost filesystem error report for type 5 error -117
[  838.015531][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  838.029369][    C1] EXT4-fs (loop1): initial error at time 2000000878: ext4_orphan_get:1423
[  838.037980][    C1] EXT4-fs (loop1): last error at time 2000000878: ext4_orphan_get:1423
[  838.619549][T28901] loop3: detected capacity change from 0 to 512
[  839.031173][T28896] EXT4-fs (loop1): 1 orphan inode deleted
[  839.045386][T28896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  839.064886][T28901] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  839.608221][T28911] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 4: comm syz.1.8968: lblock 0 mapped to illegal pblock 4 (length 1)
[  839.972931][   T28] audit: type=1400 audit(2000000880.053:873): avc:  denied  { write } for  pid=28893 comm="syz.1.8968" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  840.167060][T28901] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  840.208596][T28051] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  840.462175][T28901] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.8970: bad orphan inode 4
[  840.730218][T28901] loop3: lost filesystem error report for type 5 error -117
[  840.740473][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  840.754477][    C1] EXT4-fs (loop3): initial error at time 2000000881: ext4_orphan_get:1423
[  840.763060][    C1] EXT4-fs (loop3): last error at time 2000000881: ext4_orphan_get:1423
[  841.234419][T28901] EXT4-fs (loop3): 1 orphan inode deleted
[  841.248343][T28901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  841.500666][T28907] loop4: detected capacity change from 0 to 512
[  841.820609][T28907] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  841.919649][T20977] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  842.685452][T28051] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  843.427223][T28920] loop7: detected capacity change from 0 to 512
[  843.500241][T28907] EXT4-fs: error -4 creating inode table initialization thread
[  843.512849][T28907] EXT4-fs (loop4): mount failed
[  843.979883][T22073] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  844.067286][T28920] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  845.145655][T28920] EXT4-fs: error -4 creating inode table initialization thread
[  845.154999][T28920] EXT4-fs (loop7): mount failed
[  845.155969][T28921] loop5: detected capacity change from 0 to 512
[  845.511498][T28921] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  846.018991][T28928] loop1: detected capacity change from 0 to 512
[  846.181697][T28928] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  846.268123][T28921] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  846.268252][T28921] EXT4-fs: failed to create workqueue
[  846.285755][T28921] EXT4-fs (loop5): mount failed
[  846.343465][T28938] program syz.7.8979 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  846.373137][T28928] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  846.390067][T28928] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.8975: bad orphan inode 4
[  846.401052][T28928] loop1: lost filesystem error report for type 5 error -117
[  846.403209][T28928] EXT4-fs (loop1): 1 orphan inode deleted
[  846.411349][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  846.411520][    C1] EXT4-fs (loop1): initial error at time 2000000886: ext4_orphan_get:1423
[  846.412057][    C1] EXT4-fs (loop1): last error at time 2000000886: ext4_orphan_get:1423
[  846.454470][T28928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  846.484665][T28928] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 4: comm syz.1.8975: lblock 0 mapped to illegal pblock 4 (length 1)
[  846.622203][   T28] audit: type=1400 audit(2000000886.482:874): avc:  denied  { write } for  pid=28922 comm="syz.1.8975" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  846.672055][T28942] TC_ACT_REPEAT abuse ?
[  846.810529][T20977] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  847.083437][T28948] syzkaller0: entered promiscuous mode
[  847.089100][T28948] syzkaller0: entered allmulticast mode
[  847.191676][T28957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  847.230981][T28957] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  847.255802][T28959] loop3: detected capacity change from 0 to 7
[  847.267432][T28957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  847.280618][T28961] program syz.7.8985 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  847.304097][T28957] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  847.431234][T28965] loop5: detected capacity change from 0 to 256
[  847.444268][   T28] audit: type=1400 audit(2000000887.380:875): avc:  denied  { create } for  pid=28964 comm="syz.5.8987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  847.478871][   T28] audit: type=1400 audit(2000000887.408:876): avc:  denied  { ioctl } for  pid=28964 comm="syz.5.8987" path="socket:[87781]" dev="sockfs" ino=87781 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  847.693442][T28969] loop1: detected capacity change from 0 to 512
[  847.812231][T28969] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  847.839405][T28969] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  847.853683][T28969] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.8986: bad orphan inode 4
[  847.864538][T28969] loop1: lost filesystem error report for type 5 error -117
[  847.868099][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  847.881863][    C1] EXT4-fs (loop1): initial error at time 2000000887: ext4_orphan_get:1423
[  847.890409][    C1] EXT4-fs (loop1): last error at time 2000000887: ext4_orphan_get:1423
[  848.445572][T28969] EXT4-fs (loop1): 1 orphan inode deleted
[  848.462876][T28969] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  848.485121][T28969] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 4: comm syz.1.8986: lblock 0 mapped to illegal pblock 4 (length 1)
[  848.509342][   T28] audit: type=1400 audit(2000000888.354:877): avc:  denied  { write } for  pid=28962 comm="syz.1.8986" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  849.563033][T28979] program syz.7.8989 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  849.737492][T28978] loop3: detected capacity change from 0 to 512
[  849.764817][T28972] xt_NFQUEUE: number of total queues is 0
[  850.038447][T20977] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  850.203999][T28978] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  850.792342][T28979] team0: entered promiscuous mode
[  850.797828][T28979] team_slave_0: entered promiscuous mode
[  850.804077][T28979] team_slave_1: entered promiscuous mode
[  851.216444][T28978] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  851.572678][T28984] loop4: detected capacity change from 0 to 512
[  851.963190][T28978] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.8990: bad orphan inode 4
[  852.014608][T28984] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  852.131980][T28978] loop3: lost filesystem error report for type 5 error -117
[  852.142476][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  852.156337][    C1] EXT4-fs (loop3): initial error at time 2000000891: ext4_orphan_get:1423
[  852.164910][    C1] EXT4-fs (loop3): last error at time 2000000891: ext4_orphan_get:1423
[  852.271636][T28990] syzkaller0: entered promiscuous mode
[  852.277614][T28990] syzkaller0: entered allmulticast mode
[  852.993647][T28978] EXT4-fs (loop3): 1 orphan inode deleted
[  853.013197][T28978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  853.064021][T28984] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  853.112760][T22073] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  853.314624][T28984] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.8991: bad orphan inode 4
[  853.327304][T28984] loop4: lost filesystem error report for type 5 error -117
[  853.328616][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  853.342435][    C1] EXT4-fs (loop4): initial error at time 2000000892: ext4_orphan_get:1423
[  853.350995][    C1] EXT4-fs (loop4): last error at time 2000000892: ext4_orphan_get:1423
[  853.371592][T28984] EXT4-fs (loop4): 1 orphan inode deleted
[  853.979267][T28984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  854.094584][T28995] loop1: detected capacity change from 0 to 512
[  854.124823][T28995] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  854.152371][T27725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  854.344707][T28995] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  854.366030][T28995] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.8992: bad orphan inode 4
[  854.380966][T28995] loop1: lost filesystem error report for type 5 error -117
[  854.386568][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  854.400347][    C0] EXT4-fs (loop1): initial error at time 2000000893: ext4_orphan_get:1423
[  854.408915][    C0] EXT4-fs (loop1): last error at time 2000000893: ext4_orphan_get:1423
[  854.515839][T28995] EXT4-fs (loop1): 1 orphan inode deleted
[  854.531760][T28995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  855.021663][T28995] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 4: comm syz.1.8992: lblock 0 mapped to illegal pblock 4 (length 1)
[  855.206150][   T28] audit: type=1400 audit(2000000894.474:878): avc:  denied  { write } for  pid=28988 comm="syz.1.8992" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  855.924447][T29002] loop5: detected capacity change from 0 to 512
[  856.376071][T29002] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  856.664779][T28941] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  856.806555][T29002] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  857.488735][T29002] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.8996: bad orphan inode 4
[  857.499797][T29002] loop5: lost filesystem error report for type 5 error -117
[  857.517546][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  857.531326][    C0] EXT4-fs (loop5): initial error at time 2000000896: ext4_orphan_get:1423
[  857.539871][    C0] EXT4-fs (loop5): last error at time 2000000896: ext4_orphan_get:1423
[  857.715400][T29008] loop4: detected capacity change from 0 to 256
[  857.737271][T20977] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  857.817181][T29002] EXT4-fs (loop5): 1 orphan inode deleted
[  857.828193][T29002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  858.256668][T29009] loop3: detected capacity change from 0 to 512
[  858.524131][T29014] program syz.7.9000 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  858.537192][T21186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  858.558684][T29009] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  859.342112][T29009] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  859.343041][T29009] EXT4-fs: failed to create workqueue
[  859.374548][T29009] EXT4-fs (loop3): mount failed
[  859.776956][T29017] Cannot find set identified by id 0 to match
[  859.821515][T29023] loop1: detected capacity change from 0 to 256
[  860.003450][T29026] loop5: detected capacity change from 0 to 512
[  860.857505][T29026] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  860.875883][T29026] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  861.851940][T29026] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.9002: bad orphan inode 4
[  861.863505][T29026] loop5: lost filesystem error report for type 5 error -117
[  861.866410][T29026] EXT4-fs (loop5): 1 orphan inode deleted
[  861.866775][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  861.866810][    C0] EXT4-fs (loop5): initial error at time 2000000900: ext4_orphan_get:1423
[  861.866835][    C0] EXT4-fs (loop5): last error at time 2000000900: ext4_orphan_get:1423
[  861.930668][T29036] loop7: detected capacity change from 0 to 256
[  861.961849][T29026] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  861.993816][   T28] audit: type=1400 audit(2000000900.996:879): avc:  denied  { write } for  pid=29018 comm="syz.5.9002" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  861.997589][T29026] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 4: comm syz.5.9002: lblock 0 mapped to illegal pblock 4 (length 1)
[  862.957705][T29039] loop3: detected capacity change from 0 to 512
[  862.976832][T29039] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  862.989948][T21186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  863.261089][T29039] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  863.273571][T29039] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.9004: bad orphan inode 4
[  863.284517][T29039] loop3: lost filesystem error report for type 5 error -117
[  863.285915][T29039] EXT4-fs (loop3): 1 orphan inode deleted
[  863.294062][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  863.294273][    C1] EXT4-fs (loop3): initial error at time 2000000902: ext4_orphan_get:1423
[  863.294475][    C1] EXT4-fs (loop3): last error at time 2000000902: ext4_orphan_get:1423
[  863.357788][T29039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  863.410605][   T28] audit: type=1400 audit(2000000902.325:880): avc:  denied  { write } for  pid=29030 comm="syz.3.9004" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  863.435170][T29039] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 4: comm syz.3.9004: lblock 0 mapped to illegal pblock 4 (length 1)
[  864.470390][T29045] loop5: detected capacity change from 0 to 512
[  864.545272][T29045] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  864.690562][T29045] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  864.860667][T29045] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.9006: bad orphan inode 4
[  864.987466][T29045] loop5: lost filesystem error report for type 5 error -117
[  864.989386][T29045] EXT4-fs (loop5): 1 orphan inode deleted
[  864.997851][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  864.997959][    C0] EXT4-fs (loop5): initial error at time 2000000903: ext4_orphan_get:1423
[  864.998279][    C0] EXT4-fs (loop5): last error at time 2000000903: ext4_orphan_get:1423
[  865.046198][T29045] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  865.351836][   T28] audit: type=1400 audit(2000000904.141:881): avc:  denied  { write } for  pid=29040 comm="syz.5.9006" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  865.375733][T29045] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 4: comm syz.5.9006: lblock 0 mapped to illegal pblock 4 (length 1)
[  865.735212][T29033] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  866.396107][T22073] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  866.898921][T21186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  866.916483][T29050] loop3: detected capacity change from 0 to 256
[  866.935316][T29052] loop4: detected capacity change from 0 to 256
[  866.961798][T29054] loop1: detected capacity change from 0 to 256
[  868.082908][T29060] Cannot find set identified by id 0 to match
[  868.470145][T29072] xt_NFQUEUE: number of total queues is 0
[  868.642303][T29073] loop3: detected capacity change from 0 to 512
[  869.177243][T29073] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  869.198320][T29073] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  869.212730][T29073] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.9014: bad orphan inode 4
[  869.225026][T29073] loop3: lost filesystem error report for type 5 error -117
[  869.229487][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  869.243239][    C0] EXT4-fs (loop3): initial error at time 2000000907: ext4_orphan_get:1423
[  869.251795][    C0] EXT4-fs (loop3): last error at time 2000000907: ext4_orphan_get:1423
[  869.329746][T29073] EXT4-fs (loop3): 1 orphan inode deleted
[  869.342712][T29073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  869.375137][T29073] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 4: comm syz.3.9014: lblock 0 mapped to illegal pblock 4 (length 1)
[  870.235597][   T28] audit: type=1400 audit(2000000907.902:882): avc:  denied  { write } for  pid=29069 comm="syz.3.9014" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  870.404679][T22073] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  870.435509][T29088] loop1: detected capacity change from 0 to 512
[  870.462529][T29088] ext4: Unknown parameter 'mask'
[  870.473760][T29092] loop3: detected capacity change from 0 to 256
[  870.720429][T29067] loop5: detected capacity change from 0 to 512
[  870.758373][T29099] Cannot find set identified by id 0 to match
[  870.869815][T29067] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  870.920220][T29102] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  870.948829][T29067] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  870.989474][T29067] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.9013: bad orphan inode 4
[  871.050031][T29067] loop5: lost filesystem error report for type 5 error -117
[  871.051482][T29067] EXT4-fs (loop5): 1 orphan inode deleted
[  871.059351][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  871.059650][    C1] EXT4-fs (loop5): initial error at time 2000000909: ext4_orphan_get:1423
[  871.059780][    C1] EXT4-fs (loop5): last error at time 2000000909: ext4_orphan_get:1423
[  871.110443][T29067] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  871.161699][T29067] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 4: comm syz.5.9013: lblock 0 mapped to illegal pblock 4 (length 1)
[  871.178441][   T28] audit: type=1400 audit(2000000909.578:883): avc:  denied  { write } for  pid=29065 comm="syz.5.9013" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  871.264864][T29109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  871.273529][T29109] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  871.285376][T29109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  871.295741][T29109] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  871.337230][T29113] loop1: detected capacity change from 0 to 256
[  871.432917][T29115] loop3: detected capacity change from 0 to 256
[  871.616881][T29118] xt_NFQUEUE: number of total queues is 0
[  872.396216][T21186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  872.542088][T29119] Cannot find set identified by id 0 to match
[  872.807199][T29141] loop1: detected capacity change from 0 to 512
[  872.814355][T29141] ext4: Unknown parameter 'mask'
[  872.858099][T29148] loop3: detected capacity change from 0 to 256
[  873.255131][T29151] loop7: detected capacity change from 0 to 512
[  873.865243][T29151] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  873.886428][T29151] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  873.907161][T29151] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.9033: bad orphan inode 4
[  873.920108][T29151] loop7: lost filesystem error report for type 5 error -117
[  873.931312][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  873.945094][    C0] EXT4-fs (loop7): initial error at time 2000000912: ext4_orphan_get:1423
[  873.953622][    C0] EXT4-fs (loop7): last error at time 2000000912: ext4_orphan_get:1423
[  874.432153][T29151] EXT4-fs (loop7): 1 orphan inode deleted
[  874.456260][T29151] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  874.489641][   T28] audit: type=1400 audit(2000000912.694:884): avc:  denied  { write } for  pid=29130 comm="syz.7.9033" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  874.513782][T29151] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #2: block 4: comm syz.7.9033: lblock 0 mapped to illegal pblock 4 (length 1)
[  875.054858][T29153] Cannot find set identified by id 0 to match
[  875.171547][T23262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  875.579824][T29173] loop4: detected capacity change from 0 to 512
[  875.587108][T29173] ext4: Unknown parameter 'mask'
[  875.648425][T29175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9041'.
[  875.657535][T29175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9041'.
[  876.036115][T29184] loop5: detected capacity change from 0 to 512
[  876.054847][T29184] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  876.078791][T29184] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  876.093694][T29184] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.9044: bad orphan inode 4
[  876.104965][T29184] loop5: lost filesystem error report for type 5 error -117
[  876.106635][T29184] EXT4-fs (loop5): 1 orphan inode deleted
[  876.114611][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  876.114686][    C1] EXT4-fs (loop5): initial error at time 2000000914: ext4_orphan_get:1423
[  876.115114][    C1] EXT4-fs (loop5): last error at time 2000000914: ext4_orphan_get:1423
[  876.159135][T29184] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  876.195215][T29184] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 4: comm syz.5.9044: lblock 0 mapped to illegal pblock 4 (length 1)
[  876.309750][   T28] audit: type=1400 audit(2000000914.285:885): avc:  denied  { write } for  pid=29180 comm="syz.5.9044" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  877.239367][    C1] vcan0: j1939_tp_rxtimer: 0xffff888125f64c00: rx timeout, send abort
[  877.773711][    C1] vcan0: j1939_tp_rxtimer: 0xffff888125f64e00: rx timeout, send abort
[  877.782035][    C1] vcan0: j1939_tp_rxtimer: 0xffff888125f64c00: abort rx timeout. Force session deactivation
[  878.020443][T21186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  878.057502][T29201] loop1: detected capacity change from 0 to 256
[  878.316268][    C1] vcan0: j1939_tp_rxtimer: 0xffff888125f64e00: abort rx timeout. Force session deactivation
[  878.671338][T29197] loop4: detected capacity change from 0 to 512
[  878.894656][T29198] loop3: detected capacity change from 0 to 512
[  879.200066][T29197] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  879.212326][T29198] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  880.153046][T29211] loop5: detected capacity change from 0 to 512
[  880.213508][T29211] ext4: Unknown parameter 'mask'
[  880.346282][T29197] EXT4-fs: error -4 creating inode table initialization thread
[  880.356024][T29197] EXT4-fs (loop4): mount failed
[  880.600000][T29198] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  880.600621][T29198] EXT4-fs: failed to create workqueue
[  880.616765][T29198] EXT4-fs (loop3): mount failed
[  880.898873][T29225] TC_ACT_REPEAT abuse ?
[  881.287017][T29241] loop5: detected capacity change from 0 to 512
[  881.309277][T29241] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  881.395488][T29241] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  881.408610][T29241] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.9056: bad orphan inode 4
[  881.419859][T29241] loop5: lost filesystem error report for type 5 error -117
[  881.421524][T29241] EXT4-fs (loop5): 1 orphan inode deleted
[  881.429337][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  881.429410][    C1] EXT4-fs (loop5): initial error at time 2000000919: ext4_orphan_get:1423
[  881.429594][    C1] EXT4-fs (loop5): last error at time 2000000919: ext4_orphan_get:1423
[  881.469705][T29241] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  881.501276][T29241] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 4: comm syz.5.9056: lblock 0 mapped to illegal pblock 4 (length 1)
[  881.615619][   T28] audit: type=1400 audit(2000000919.254:886): avc:  denied  { write } for  pid=29230 comm="syz.5.9056" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  882.231774][T29251] syzkaller0: entered promiscuous mode
[  882.251807][T29251] syzkaller0: entered allmulticast mode
[  882.511802][T29266] loop7: detected capacity change from 0 to 512
[  882.526628][T29266] ext4: Unknown parameter 'mask'
[  882.532914][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810df9f600: rx timeout, send abort
[  882.852927][T21186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  882.925638][T29277] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9067'.
[  882.934885][T29277] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9067'.
[  882.959137][T29278] loop5: detected capacity change from 0 to 512
[  882.972814][T29278] ext4: Unknown parameter 'mask'
[  882.981132][T29280] loop1: detected capacity change from 0 to 256
[  883.067191][    C1] vcan0: j1939_tp_rxtimer: 0xffff888125f64c00: rx timeout, send abort
[  883.075483][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810df9f600: abort rx timeout. Force session deactivation
[  883.503737][T29292] loop4: detected capacity change from 0 to 512
[  883.609760][    C1] vcan0: j1939_tp_rxtimer: 0xffff888125f64c00: abort rx timeout. Force session deactivation
[  884.152882][T29292] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  884.189765][T29292] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  884.234269][T29292] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.9070: bad orphan inode 4
[  884.245023][T29292] loop4: lost filesystem error report for type 5 error -117
[  884.254034][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  884.267793][    C0] EXT4-fs (loop4): initial error at time 2000000921: ext4_orphan_get:1423
[  884.276372][    C0] EXT4-fs (loop4): last error at time 2000000921: ext4_orphan_get:1423
[  885.298352][T29292] EXT4-fs (loop4): 1 orphan inode deleted
[  885.309116][T29292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  885.976436][T27725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  886.338820][T29318] loop1: detected capacity change from 0 to 512
[  886.369129][T29318] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  886.401260][T29318] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  886.415470][T29318] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.9073: bad orphan inode 4
[  886.426994][T29318] loop1: lost filesystem error report for type 5 error -117
[  886.430260][T29318] EXT4-fs (loop1): 1 orphan inode deleted
[  886.438011][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  886.438056][    C1] EXT4-fs (loop1): initial error at time 2000000923: ext4_orphan_get:1423
[  886.438449][    C1] EXT4-fs (loop1): last error at time 2000000923: ext4_orphan_get:1423
[  886.492193][T29318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  886.532384][T29318] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 4: comm syz.1.9073: lblock 0 mapped to illegal pblock 4 (length 1)
[  886.743965][   T28] audit: type=1400 audit(2000000923.951:887): avc:  denied  { write } for  pid=29308 comm="syz.1.9073" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  886.782901][T29323] loop4: detected capacity change from 0 to 256
[  887.937346][T29326] Cannot find set identified by id 0 to match
[  887.997529][T20977] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  888.094246][T29330] loop3: detected capacity change from 0 to 512
[  888.199374][T29330] ext4: Unknown parameter 'mask'
[  888.335971][T29343] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  888.368705][T29348] loop4: detected capacity change from 0 to 256
[  888.837803][T29361] loop3: detected capacity change from 0 to 512
[  889.562796][T29363] syzkaller0: entered promiscuous mode
[  889.684835][T29363] syzkaller0: entered allmulticast mode
[  890.380572][T29361] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  890.420908][T29361] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  890.433628][T29361] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.9085: bad orphan inode 4
[  890.444657][T29361] loop3: lost filesystem error report for type 5 error -117
[  890.446779][T29361] EXT4-fs (loop3): 1 orphan inode deleted
[  890.454929][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  890.455034][    C1] EXT4-fs (loop3): initial error at time 2000000927: ext4_orphan_get:1423
[  890.455111][    C1] EXT4-fs (loop3): last error at time 2000000927: ext4_orphan_get:1423
[  890.500191][T29361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  890.540661][T29361] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 4: comm syz.3.9085: lblock 0 mapped to illegal pblock 4 (length 1)
[  890.560374][   T28] audit: type=1400 audit(2000000927.704:888): avc:  denied  { write } for  pid=29357 comm="syz.3.9085" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  890.664068][T29366] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  890.816303][T29375] syzkaller0: entered promiscuous mode
[  890.822004][T29375] syzkaller0: entered allmulticast mode
[  890.900885][T29378] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9091'.
[  890.911169][T29378] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9091'.
[  890.923999][T29376] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9088'.
[  891.087778][T22073] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  891.293260][T29396] loop7: detected capacity change from 0 to 512
[  891.375250][T29396] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  891.401023][T29396] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  891.412983][T29396] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.9092: bad orphan inode 4
[  891.423668][T29396] loop7: lost filesystem error report for type 5 error -117
[  891.424544][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  891.441249][    C1] EXT4-fs (loop7): initial error at time 2000000928: ext4_orphan_get:1423
[  891.450782][    C1] EXT4-fs (loop7): last error at time 2000000928: ext4_orphan_get:1423
[  891.464980][T29396] EXT4-fs (loop7): 1 orphan inode deleted
[  891.485948][T29396] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  892.043014][T29402] loop3: detected capacity change from 0 to 512
[  892.075436][T29402] ext4: Unknown parameter 'mask'
[  892.880404][T29415] loop4: detected capacity change from 0 to 512
[  892.907855][T29415] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  892.937573][T29415] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  892.951930][T29415] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.9098: bad orphan inode 4
[  892.963909][T29415] loop4: lost filesystem error report for type 5 error -117
[  892.968746][T29415] EXT4-fs (loop4): 1 orphan inode deleted
[  892.976736][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  892.976789][    C1] EXT4-fs (loop4): initial error at time 2000000929: ext4_orphan_get:1423
[  892.977290][    C1] EXT4-fs (loop4): last error at time 2000000929: ext4_orphan_get:1423
[  893.022444][T29415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  893.059946][T29415] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 4: comm syz.4.9098: lblock 0 mapped to illegal pblock 4 (length 1)
[  893.080296][   T28] audit: type=1400 audit(2000000930.062:889): avc:  denied  { write } for  pid=29412 comm="syz.4.9098" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  893.243806][T23262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  893.266154][ T3290] ==================================================================
[  893.274274][ T3290] BUG: KCSAN: data-race in __d_drop / fast_dput
[  893.280530][ T3290] 
[  893.282882][ T3290] write to 0xffff88810825e010 of 8 bytes by task 2983 on cpu 0:
[  893.290528][ T3290]  __d_drop+0x14d/0x240
[  893.294707][ T3290]  __dentry_kill+0x125/0x4d0
[  893.299327][ T3290]  finish_dput+0x2b/0x200
[  893.303690][ T3290]  dput+0x52/0x60
[  893.307344][ T3290]  terminate_walk+0x77/0x210
[  893.311969][ T3290]  path_lookupat+0x469/0x500
[  893.316585][ T3290]  filename_lookup+0x190/0x390
[  893.321378][ T3290]  do_readlinkat+0x74/0x2f0
[  893.325912][ T3290]  __x64_sys_readlink+0x47/0x60
[  893.330807][ T3290]  x64_sys_call+0x2b51/0x3020
[  893.335533][ T3290]  do_syscall_64+0x12c/0x3b0
[  893.340182][ T3290]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  893.346108][ T3290] 
[  893.348464][ T3290] read to 0xffff88810825e010 of 8 bytes by task 3290 on cpu 1:
[  893.356029][ T3290]  fast_dput+0x5f/0x2c0
[  893.360208][ T3290]  dput+0x24/0x60
[  893.363877][ T3290]  filename_unlinkat+0x217/0x410
[  893.368869][ T3290]  __se_sys_unlink+0x2b/0xe0
[  893.373520][ T3290]  __x64_sys_unlink+0x1f/0x30
[  893.378227][ T3290]  x64_sys_call+0x2eb6/0x3020
[  893.382934][ T3290]  do_syscall_64+0x12c/0x3b0
[  893.387575][ T3290]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  893.393493][ T3290] 
[  893.395827][ T3290] value changed: 0xffff88823747d090 -> 0x0000000000000000
[  893.402958][ T3290] 
[  893.405290][ T3290] Reported by Kernel Concurrency Sanitizer on:
[  893.411456][ T3290] CPU: 1 UID: 0 PID: 3290 Comm: udevd Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  893.421899][ T3290] Tainted: [W]=WARN
[  893.425724][ T3290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  893.435804][ T3290] ==================================================================
[  893.818162][T29368] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  894.366156][T27725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.