last executing test programs:

9m39.154806404s ago: executing program 2 (id=3767):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x60)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xf, 0x80, 0x0, 0x0, 0x0, 0x40000000002, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000, 0x7}, 0x800, 0x1000000, 0xd2b6, 0x3, 0xfffffffffdf7bbfe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0x4000000000e, 0xffffffffffffffff, 0x0)
socket$kcm(0x23, 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f00000001c0)={[{0x2d, 'perf_event'}, {0x2d, 'devices'}]}, 0x15)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$pptp(0x18, 0x1, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r3, 0x0, 0x20040848)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x4c, 0x12, 0x1, 0x70bd28, 0x25dfdbfc, {0x3c, 0x40, 0x1, 0x7, {0x4e22, 0x4e21, [0x4, 0x42, 0x7, 0x5], [0x53d2, 0x5, 0x8, 0x1], r1, [0x9d, 0x2]}, 0x1, 0x7ff}}, 0x4c}, 0x1, 0x0, 0x0, 0x4100}, 0x4000001)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b40)={r4, r5, 0x26, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c)
bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r6, 0x4)

9m38.856587713s ago: executing program 2 (id=3775):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0], 0x138}}, 0x40000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}, [@mark={0xc, 0x15, {0x35075c, 0x2}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}}, 0x20000080)

9m38.732124327s ago: executing program 2 (id=3780):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x4000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x28, 0x3c, 0x107, 0xfffffffe, 0xfffffffb, {0x1, 0x7c}, [@nested={0x14, 0x142, 0x0, 0x1, [@typed={0xd, 0x8f, 0x0, 0x0, @str='hash:net\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044025}, 0xc000)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = socket$kcm(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r3, 0x1, 0x28, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0)
r4 = socket$kcm(0x1e, 0x4, 0x0)
sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000380)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x4, 0x16, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000", @ANYBLOB="0000000000000000186200000a00000000000000ff030000bf"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r0, 0x19}, 0x94)
fstat(0xffffffffffffffff, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40000120)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r2, &(0x7f0000000140), &(0x7f00000001c0)=""/5}, 0x20)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x6)

9m38.699424638s ago: executing program 2 (id=3785):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0)
mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0)

9m38.62353945s ago: executing program 2 (id=3787):
r0 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="880100001b0001000000000000000000640101000000000000000000000000002001000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000967b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001010103000000000000000000000022bc000800b80008000000b000c0935e9403cd1c871f765a0cdc299f8e685ac5ac73a8187c3c59ca5f"], 0x188}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x7fe2, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [<r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x40003fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, r4, 0xa)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
openat$cgroup_ro(r5, &(0x7f0000000280)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'tunl0\x00', @random="0000230c1100"})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x24004840)

9m38.334481519s ago: executing program 2 (id=3801):
socket$kcm(0x11, 0xa, 0x300)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4", 0x36}], 0x1}, 0x0)

9m38.289573421s ago: executing program 32 (id=3801):
socket$kcm(0x11, 0xa, 0x300)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4", 0x36}], 0x1}, 0x0)

3m44.85892057s ago: executing program 0 (id=8005):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2281], &(0x7f0000000140)='GPL\x00'}, 0x94)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000891)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)

3m44.764511863s ago: executing program 0 (id=8010):
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={@empty, 0x1, 0x0, 0x20, 0x0, [{@initdev}, {@broadcast}]}})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000800), 0x1, 0x76a, &(0x7f0000001800)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x401, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0xffffffffffffff20, 0x3, 0x4000, 0x0, 0x1, 0x0, 0x80000000000})
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)='0>', 0x2, 0xfffffffffffffffc)

3m43.758310154s ago: executing program 0 (id=8014):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0xb, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)

3m43.57709711s ago: executing program 0 (id=8020):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0xfffffffd, 0x1, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0)

3m43.339033158s ago: executing program 0 (id=8025):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x6, 0x7ff}, 0x4000, 0x5, 0xfffffffe, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$kcm(0xa, 0x1, 0x106)
r2 = socket$netlink(0x10, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)='a', 0x1}], 0x1}, 0x24000800)
syz_clone(0x10000000, &(0x7f0000000180)="651d322396dc3fd71030bdd44518498061cb4d7a60f0d4fc7afcc265f81e25e24b", 0x21, 0x0, 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002fc0)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10, 0x3}, @TCA_CT_LABELS={0x14, 0x7, "de0b724d355a78a7fab3582b1c1974e8"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000)

3m43.013475068s ago: executing program 0 (id=8026):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x80)
r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r7, &(0x7f0000000140), 0x0}, 0x20)
write$cgroup_pid(r6, &(0x7f0000001c00), 0x12)
r8 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r8, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r9 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r9, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r8, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffffaf, 0x4000280, 0x0, 0xffffffffffffffe1)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
shutdown(r0, 0x0)
pipe(&(0x7f0000000080))

3m42.732698577s ago: executing program 33 (id=8026):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x80)
r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r7, &(0x7f0000000140), 0x0}, 0x20)
write$cgroup_pid(r6, &(0x7f0000001c00), 0x12)
r8 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r8, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r9 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r9, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r8, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffffaf, 0x4000280, 0x0, 0xffffffffffffffe1)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
shutdown(r0, 0x0)
pipe(&(0x7f0000000080))

4.476006668s ago: executing program 3 (id=10472):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = dup(r0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0xb9d8, 0x2})
open(0x0, 0x80242, 0x1df2a23c5997fa5f)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0)

3.401327732s ago: executing program 3 (id=10487):
capset(0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000080a000/0x3000)=nil, 0x3000, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0})
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGL2TPSTATS(r1, 0x40047459, 0x0)

3.202838199s ago: executing program 3 (id=10491):
close(0x3)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fgetxattr(r1, &(0x7f0000000180)=@random={'security.', 'syz\xf6\xa3>NpW\xb9k\\|\xeb|\x01\x00\x00\x00\x00\x00\x00\x00\xac\x81\v\xe1j}\xb7\a}h\xd6;\a\x85i\xa4q\xb7q\x80\xebXk\x96G1\xdcRd\x89\xae\xd0[\xcf\xf3\xb3\xd5*\xd6\x96\x84\xf4\x0e\x1fH/M\a\xcd\x13\'Z\x98~\xf7\xe5\xa0\x80aGG\xd4\xba\x8f\xce\fd@Glj6\x87\xe9\xb8\x8c\xdaR\xee\xb6D\xff\xa1\xbf#\xb0\xd5\xb9w\xf6!R\xdf,\xf9\xc9\xe1\xf0Das(\x061C\xc5\xa1'}, &(0x7f0000000280)=""/198, 0xff71)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)

3.135999851s ago: executing program 5 (id=10494):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0xe00}, 0x1f00)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0)

2.215850449s ago: executing program 3 (id=10507):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f00000070c0)=[{{&(0x7f00000009c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x6, 0x0, 0x0, [0x0]}, @ra={0x94, 0x4}]}}}], 0x20}}], 0x1, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8000000}, 0x48)

2.21458764s ago: executing program 5 (id=10508):
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, 0x0, 0x0)

2.135617752s ago: executing program 5 (id=10509):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d08000606", 0x16}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0xb4}}, 0x0)

1.939807649s ago: executing program 5 (id=10516):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca396", 0xe4}, {&(0x7f0000000e40)="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", 0x18b}, {&(0x7f0000000cc0)="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", 0x150}, {&(0x7f00000004c0)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9ea0cd4db9af5e29736a345d6b40ed83eee86f35f2c0", 0xa5}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}, 0x800)

1.828983132s ago: executing program 5 (id=10517):
close(0x3)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fgetxattr(r1, &(0x7f0000000180)=@random={'security.', 'syz\xf6\xa3>NpW\xb9k\\|\xeb|\x01\x00\x00\x00\x00\x00\x00\x00\xac\x81\v\xe1j}\xb7\a}h\xd6;\a\x85i\xa4q\xb7q\x80\xebXk\x96G1\xdcRd\x89\xae\xd0[\xcf\xf3\xb3\xd5*\xd6\x96\x84\xf4\x0e\x1fH/M\a\xcd\x13\'Z\x98~\xf7\xe5\xa0\x80aGG\xd4\xba\x8f\xce\fd@Glj6\x87\xe9\xb8\x8c\xdaR\xee\xb6D\xff\xa1\xbf#\xb0\xd5\xb9w\xf6!R\xdf,\xf9\xc9\xe1\xf0Das(\x061C\xc5\xa1'}, &(0x7f0000000280)=""/198, 0xff71)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.246231201s ago: executing program 3 (id=10520):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0xe00}, 0x1f00)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0)

1.127985884s ago: executing program 4 (id=10521):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd38, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = openat$cgroup_procs(r0, &(0x7f0000000580)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000005c0)=r2, 0x12)
r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_freezer_state(r4, &(0x7f00000000c0)='THAWED\x00', 0x7)

1.096120265s ago: executing program 4 (id=10523):
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f00000001c0)={0x0, 0xb7, 0x5f, 0x2, 0x7, 0x1, 0x0, 0x0, 0x35a05, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1001}, 0x1075, 0x101, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

1.035922807s ago: executing program 6 (id=10525):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x8cb7}, 0x2000, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='cpu!=0||!')
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x20, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x90)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d3446040fe00000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20040000)
close(r0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000001d80), 0x0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20)
socket$kcm(0x10, 0x400000002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20)
r2 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x3}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7ff, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7010842c, 0x7}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000800800034000000007080004400000000f080001400000000024000580090001006d6574610000000014000280080001400000000908000240000000100900010073797a30000000000900020073797a320000000014000000110001000000"], 0xb0}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x8)

999.005948ms ago: executing program 4 (id=10527):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca396", 0xe4}, {&(0x7f0000000e40)="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", 0x18b}, {&(0x7f0000000cc0)="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", 0x150}, {&(0x7f00000004c0)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9ea0cd4db9af5e29736a345d6b40ed83eee86f35f2c0", 0xa5}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}, 0x800)

949.21618ms ago: executing program 1 (id=10528):
r0 = syz_io_uring_setup(0xf03, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x3, 0x3}, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000180))
syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000)
io_uring_enter(r0, 0x1, 0x20, 0x1, 0x0, 0x0)
io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
socket(0x1e, 0x1, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, 0x0, 0x0)
syz_usb_ep_write(r3, 0x81, 0x42, &(0x7f00000002c0)="b9425b44651dd23241963599000000114a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd918c3bb8290522c77157d88010000003a5bd5531d459dff")

948.37237ms ago: executing program 4 (id=10529):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000001180)={0xf97cff8c, 0x8}, 0x10)

859.007763ms ago: executing program 5 (id=10530):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x2a442, 0x78)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0)
write$P9_RUNLINKAT(r0, &(0x7f0000000100)={0x7, 0x4d, 0x2}, 0x7)

846.052903ms ago: executing program 4 (id=10531):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x2, 0x2, 0x81, 0x4, 0x7, 0x2})
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f00000000c0)={0x0, 0x21, 0x4b, {0x4b, 0x6, "bbe757a8c7cdd180c54518e117cfb061c3f45559af558c0522fcc73b7e713e29a8b6398a35bc1485cb828004f4f06e525e7ee01ea645c6aee7f5b459794e8c81a38fe8e1011fb94f67"}}, &(0x7f0000000140)={0x0, 0x3, 0x13, @string={0x13, 0x3, "534646075452c294aac90960b8221c6584"}}, &(0x7f0000000240)={0x0, 0x22, 0x1f, {[@main=@item_4={0x3, 0x0, 0x9, "0a28ec03"}, @main=@item_4={0x3, 0x0, 0x9, "2024abf1"}, @local=@item_4={0x3, 0x2, 0x3, "f4971687"}, @local, @local=@item_4={0x3, 0x2, 0x2, 'P%G/'}, @local=@item_012={0x0, 0x2, 0x1, "85"}, @main=@item_4={0x3, 0x0, 0x8, "3fb92c8d"}, @main=@item_012={0x0, 0x0, 0xa, 'pB'}, @main=@item_4={0x3, 0x0, 0xb, "c531e48f"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xff, 0x1, {0x22, 0x48f}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000580)={0x20, 0x18, 0x42, "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"}, &(0x7f00000002c0)={0x0, 0xa, 0xc2, 0x5}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x91}, &(0x7f0000000340)={0x20, 0x1, 0xe9, "849990d3443663ef8730c5c70494a415cf2d13b563d4de0efe922723e10f1cb6e65c868d8b4134bb06d35b0f76bf2e3400f44ecf1cdee4d3f7b39658abb351f011f92baaa8d29dae4d440d395f3dcec887473acc21822749f6ebf215634949d5845df62af865a23ecf923593b7c0ed3fd0f0199bdb16e202b9f2db2614e3c866f588d1adb691fe486a1246ff70843a08d62bfac46ddba9f63d293d7b57b4369fd21b48f800fcfb107460dbbe08b89fc5d01ec1cbb2fe64cd1632a70e17698d79d82b58ce97c37cb838c883e18c391fccda0d5a7f6a23ffe6bd9aecf5761c63c44d0a60048361fba000"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x6}})

741.738756ms ago: executing program 6 (id=10532):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x4000041)
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0xffff, 0x9e, &(0x7f00000006c0)=""/158, 0x0, 0x45, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000780)=[{0x1, 0x3, 0x0, 0x4}, {0x4, 0x4, 0x10, 0x7}, {0x4, 0x3, 0xe, 0x7}, {0x0, 0x1, 0xb, 0x7}], 0x10, 0xffff4fb5}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r1}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r1}, 0x38)

732.446847ms ago: executing program 1 (id=10533):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd38, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = openat$cgroup_procs(r0, &(0x7f0000000580)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000005c0)=r2, 0x12)
r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_freezer_state(r4, &(0x7f00000000c0)='THAWED\x00', 0x7)

677.125749ms ago: executing program 6 (id=10534):
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x8, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x10ae80, 0x2, 0x0, 0x5, 0x0, 0xd}, 0x0, 0xffffffffffffffff, r0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x8, 0x201}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0xfffffffd}]}}, 0x0, 0x26}, 0x28)
r2 = socket$kcm(0x15, 0x5, 0x0)
close(r2)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040))
openat$cgroup_freezer_state(r1, &(0x7f0000001940), 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xf00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0)
syz_clone(0x0, &(0x7f0000001980)="987124a815f6d238a35dbda703c8565087819afbad7af22f3e71d02613e4ad1878efa333484a3652b197079c3c824750415ee2098bdb6636dc0f9e366a2f1c44745627011b79979e72cfabbff6183ba1db7d0a599c5eb1907502861c78af28079c3560f8df617166c4725cb8dac2cfafcc7a8641118957669bcb3af180e347a5420370c3a503e13ada4d5b8371daf6bf6d019fcd101a04793564523837c444bdfccd683e90ad1afcabcde60978a52e226c098b5aa44049b9b07e77f9428699f16c45ab6a05", 0xc5, &(0x7f0000001a80), &(0x7f0000001ac0), &(0x7f0000001b00)="6d69f1dbcc8ebb800c2443a662517fc99df046209876517e0aa3f23cd0acc134bc98e09f8568378656926cb8203fd59dddf4bed86e98d1c230856f4437f4811c583dee9a0851b9917d4410e378c853ce3e857e2932a71e192fc5a9cd5d814b22d1dfa53352fbce61209bd755e959371ed98c046a18c2c9aba7d66b28023c23f9aac55b8036fbc95f2f074aa9b5")

676.036889ms ago: executing program 1 (id=10535):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="62202a3a2a20720033e3e871ed566cdf2b6d"], 0x8)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa)

608.699371ms ago: executing program 1 (id=10536):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@barrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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")
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
flistxattr(0xffffffffffffffff, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101842, 0x1)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

583.551701ms ago: executing program 6 (id=10537):
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f00000001c0)={0x0, 0xb7, 0x5f, 0x2, 0x7, 0x1, 0x0, 0x0, 0x35a05, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1001}, 0x1075, 0x101, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

406.441777ms ago: executing program 6 (id=10538):
r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000140), 0x0, 0x539, &(0x7f0000001440)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x1)

304.12864ms ago: executing program 1 (id=10539):
fsopen(&(0x7f0000000000)='sockfs\x00', 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000140), 0x4)

274.784041ms ago: executing program 3 (id=10540):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r1 = fsmount(r0, 0x1, 0xf6)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r0, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r3, 0x0, 0x0)
fchdir(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000840)=@base={0x1, 0x5, 0x0, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syz_tun\x00', 0x4a11})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40)
write(r6, &(0x7f0000004200)='t', 0x1)
sendfile(r6, r5, 0x0, 0x7fffffff)
getsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0)
bind$packet(r6, 0x0, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000140)=0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6)
setsockopt$inet6_IPV6_ADDRFORM(r7, 0x3a, 0x1, 0x0, 0x0)
ftruncate(r4, 0x2007ffb)
sendfile(r4, r4, 0x0, 0x1000000201005)
capset(&(0x7f0000000580)={0x20080522}, &(0x7f0000000040)={0x200000, 0x4200003, 0x9, 0x0, 0x20000003, 0x800})
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r9, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)

188.600024ms ago: executing program 4 (id=10541):
close(0x3)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fgetxattr(r1, &(0x7f0000000180)=@random={'security.', 'syz\xf6\xa3>NpW\xb9k\\|\xeb|\x01\x00\x00\x00\x00\x00\x00\x00\xac\x81\v\xe1j}\xb7\a}h\xd6;\a\x85i\xa4q\xb7q\x80\xebXk\x96G1\xdcRd\x89\xae\xd0[\xcf\xf3\xb3\xd5*\xd6\x96\x84\xf4\x0e\x1fH/M\a\xcd\x13\'Z\x98~\xf7\xe5\xa0\x80aGG\xd4\xba\x8f\xce\fd@Glj6\x87\xe9\xb8\x8c\xdaR\xee\xb6D\xff\xa1\xbf#\xb0\xd5\xb9w\xf6!R\xdf,\xf9\xc9\xe1\xf0Das(\x061C\xc5\xa1'}, &(0x7f0000000280)=""/198, 0xff71)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)

118.014536ms ago: executing program 1 (id=10542):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680))
syz_open_procfs(0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x10000, &(0x7f0000001100)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x206, &(0x7f0000000480)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4897}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x1)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$unix(0x1, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x301800, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x4c, 0x4}, {0x6}]})

0s ago: executing program 6 (id=10543):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x8cb7}, 0x2000, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='cpu!=0||!')
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x20, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x90)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d3446040fe00000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20040000)
close(r0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000001d80), 0x0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20)
socket$kcm(0x10, 0x400000002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20)
r3 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x3}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7ff, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7010842c, 0x7}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000800800034000000007080004400000000f080001400000000024000580090001006d6574610000000014000280080001400000000908000240000000100900010073797a30000000000900020073797a320000000014000000110001000000"], 0xb0}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8)

kernel console output (not intermixed with test programs):

 585.337933][T27180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  585.352220][ T1724] team0 (unregistering): Port device team_slave_1 removed
[  585.379847][ T1724] team0 (unregistering): Port device team_slave_0 removed
[  585.381067][T27180] ext4 filesystem being mounted at /454/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  585.412335][   T28] audit: type=1400 audit(2000000356.919:1118): avc:  denied  { write } for  pid=27179 comm="syz.1.8582" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  585.542630][ T3028] 8021q: adding VLAN 0 to HW filter on device eth9
[  585.550005][T27182] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  585.559156][T27186] netlink: 'syz.6.8584': attribute type 29 has an invalid length.
[  585.567516][ T6227] infiniband syz1: ib_query_port failed (-19)
[  585.568280][T27190] netlink: 'syz.6.8584': attribute type 29 has an invalid length.
[  585.649986][   T28] audit: type=1400 audit(2000000357.143:1119): avc:  denied  { write } for  pid=27179 comm="syz.1.8582" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  586.100422][T27041] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  586.152298][   T28] audit: type=1400 audit(2000000362.616:1120): avc:  denied  { write } for  pid=27195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  586.183472][T27212] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8586'.
[  586.200614][T27041] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  586.234700][T27041] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  586.266004][   T28] audit: type=1400 audit(2000000362.710:1121): avc:  denied  { write } for  pid=27213 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  586.302746][T18566] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  586.312245][T27041] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  586.811990][T27041] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  586.831372][   T28] audit: type=1400 audit(2000000363.243:1122): avc:  denied  { write } for  pid=27222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  586.860046][T27041] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  586.878064][T27041] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  586.893232][   T28] audit: type=1400 audit(2000000363.299:1123): avc:  denied  { write } for  pid=27240 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  586.915884][T27041] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  587.029873][   T28] audit: type=1400 audit(2000000363.430:1124): avc:  denied  { write } for  pid=27251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  587.068348][T27041] 8021q: adding VLAN 0 to HW filter on device bond0
[  587.081542][T27041] 8021q: adding VLAN 0 to HW filter on device team0
[  587.089314][T27266] netlink: 'syz.3.8595': attribute type 29 has an invalid length.
[  587.100519][ T1724] bridge0: port 1(bridge_slave_0) entered blocking state
[  587.107699][ T1724] bridge0: port 1(bridge_slave_0) entered forwarding state
[  587.115656][   T28] audit: type=1400 audit(2000000363.505:1125): avc:  denied  { write } for  pid=27267 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  587.140701][T27266] netlink: 'syz.3.8595': attribute type 29 has an invalid length.
[  587.152741][ T4493] bridge0: port 2(bridge_slave_1) entered blocking state
[  587.159841][ T4493] bridge0: port 2(bridge_slave_1) entered forwarding state
[  587.363365][T27041] 8021q: adding VLAN 0 to HW filter on device batadv0
[  587.502850][T27295] loop5: detected capacity change from 0 to 2048
[  587.529823][T27295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  587.595985][T27295] ext4 filesystem being mounted at /373/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  587.767634][T27041] veth0_vlan: entered promiscuous mode
[  587.788862][T27041] veth1_vlan: entered promiscuous mode
[  587.856026][T27041] veth0_macvtap: entered promiscuous mode
[  587.895666][T27041] veth1_macvtap: entered promiscuous mode
[  587.940874][T27041] batman_adv: batadv0: Interface activated: batadv_slave_0
[  587.980437][T27041] batman_adv: batadv0: Interface activated: batadv_slave_1
[  588.022655][ T2192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  588.061794][ T2192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  588.355142][ T2192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  588.436214][T20943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  588.450199][ T2192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  588.531399][T27321] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  588.555918][T27321] syzkaller0: entered promiscuous mode
[  588.567812][T27321] syzkaller0: entered allmulticast mode
[  588.613520][T27321] tipc: Resetting bearer <eth:syzkaller0>
[  588.636675][T27320] tipc: Resetting bearer <eth:syzkaller0>
[  588.663509][T27320] tipc: Disabling bearer <eth:syzkaller0>
[  589.156242][T27332] netlink: 'syz.5.8609': attribute type 29 has an invalid length.
[  589.180235][T27332] netlink: 'syz.5.8609': attribute type 29 has an invalid length.
[  589.342214][T27367] netlink: 'syz.5.8614': attribute type 1 has an invalid length.
[  589.350357][T27367] netlink: 'syz.5.8614': attribute type 2 has an invalid length.
[  589.414050][T27370] loop5: detected capacity change from 0 to 2048
[  589.434865][T27370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  589.447540][T27370] ext4 filesystem being mounted at /377/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  589.495511][T24284] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  589.589661][T27355] lo speed is unknown, defaulting to 1000
[  589.595916][T27355] gretap0 speed is unknown, defaulting to 1000
[  590.215498][T24284] team0: Port device netdevsim2 removed
[  590.255783][T24284] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.579912][T20943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  591.070940][T24284] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.168926][T27484] netlink: 14752 bytes leftover after parsing attributes in process `syz.4.8620'.
[  591.228532][T24284] bond0: (slave netdevsim0): Releasing backup interface
[  591.241666][T27491] loop1: detected capacity change from 0 to 512
[  591.267270][T27491] ext4: Unknown parameter 'func'
[  591.302956][T24284] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.539624][T27355] bridge0: port 1(bridge_slave_0) entered blocking state
[  591.565124][T27355] bridge0: port 1(bridge_slave_0) entered disabled state
[  591.602800][T27355] bridge_slave_0: entered allmulticast mode
[  591.635337][T27355] bridge_slave_0: entered promiscuous mode
[  591.661586][T27355] bridge0: port 2(bridge_slave_1) entered blocking state
[  591.693276][T27355] bridge0: port 2(bridge_slave_1) entered disabled state
[  591.720332][T27355] bridge_slave_1: entered allmulticast mode
[  591.746288][T27355] bridge_slave_1: entered promiscuous mode
[  591.810613][T27355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  591.824197][T27355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  591.903501][T27355] team0: Port device team_slave_0 added
[  591.929702][T27355] team0: Port device team_slave_1 added
[  592.016573][T27355] batman_adv: batadv0: Adding interface: batadv_slave_0
[  592.037998][T27355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  592.073893][T27355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  592.091046][T24284] bridge_slave_1: left allmulticast mode
[  592.099119][T24284] bridge_slave_1: left promiscuous mode
[  592.104988][T24284] bridge0: port 2(bridge_slave_1) entered disabled state
[  592.115956][T24284] bridge_slave_0: left allmulticast mode
[  592.123717][T24284] bridge_slave_0: left promiscuous mode
[  592.129527][T24284] bridge0: port 1(bridge_slave_0) entered disabled state
[  592.146560][T24284] batadv0: left allmulticast mode
[  592.153022][T24284] batadv0: left promiscuous mode
[  592.163550][T24284] ¥: port 1(batadv0) entered disabled state
[  592.213568][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  592.213673][   T28] audit: type=1400 audit(2000000378.285:1130): avc:  denied  { write } for  pid=27513 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  592.287268][   T28] audit: type=1400 audit(2000000378.350:1131): avc:  denied  { write } for  pid=27541 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  592.501693][T27577] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.8630'.
[  592.996529][T24284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  593.055570][T24284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  593.098919][T24284] bond0 (unregistering): Released all slaves
[  593.128838][T27355] batman_adv: batadv0: Adding interface: batadv_slave_1
[  593.151528][T27355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  593.268677][T27355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  593.319154][ T3028] 8021q: adding VLAN 0 to HW filter on device eth9
[  593.329154][T24284] tipc: Left network mode
[  593.368810][T24284] hsr_slave_0: left promiscuous mode
[  593.501633][T24284] hsr_slave_1: left promiscuous mode
[  593.507888][T24284] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  593.515327][T24284] batman_adv: batadv0: Removing interface: batadv_slave_0
[  593.538265][T24284] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  593.545911][T24284] batman_adv: batadv0: Removing interface: batadv_slave_1
[  593.553692][T24284] batman_adv: batadv0: Interface deactivated: macvtap1
[  593.586607][T24284] batman_adv: batadv0: Removing interface: macvtap1
[  594.081777][   T28] audit: type=1400 audit(2000000380.035:1132): avc:  denied  { write } for  pid=27601 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  594.156057][   T28] audit: type=1400 audit(2000000380.091:1133): avc:  denied  { write } for  pid=27633 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  594.482371][T24284] batadv_slave_1: left promiscuous mode
[  594.493297][T24284] veth1_macvtap: left promiscuous mode
[  594.504736][T24284] veth0_macvtap: left promiscuous mode
[  594.516273][T24284] veth0_vlan: left promiscuous mode
[  594.559548][T27642] netlink: 'syz.6.8645': attribute type 1 has an invalid length.
[  594.581472][T27642] netlink: 'syz.6.8645': attribute type 2 has an invalid length.
[  594.599199][T27642] netlink: 'syz.6.8645': attribute type 10 has an invalid length.
[  594.735431][T24284] team0 (unregistering): Port device team_slave_1 removed
[  594.753364][T24284] team0 (unregistering): Port device team_slave_0 removed
[  594.904901][T27355] hsr_slave_0: entered promiscuous mode
[  594.914066][T27355] hsr_slave_1: entered promiscuous mode
[  594.924094][T27355] debugfs: 'hsr0' already exists in 'hsr'
[  594.930082][T27355] Cannot create hsr debugfs directory
[  594.942696][ T3028] 8021q: adding VLAN 0 to HW filter on device eth10
[  594.950087][T27642] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  594.959817][T27642] batman_adv: batadv0: Removing interface: batadv_slave_0
[  594.968731][T27642] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  595.009934][T27642] batman_adv: batadv0: Removing interface: batadv_slave_1
[  596.005554][T27672] tipc: Started in network mode
[  596.051209][T27672] tipc: Node identity 76e8e63414b1, cluster identity 4711
[  596.125267][T27672] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  596.192457][T27677] syzkaller0: entered promiscuous mode
[  596.200123][   T28] audit: type=1400 audit(2000000382.009:1134): avc:  denied  { write } for  pid=27659 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  596.224929][T27677] syzkaller0: entered allmulticast mode
[  596.260156][   T28] audit: type=1400 audit(2000000382.075:1135): avc:  denied  { write } for  pid=27684 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  596.310448][T27677] tipc: Resetting bearer <eth:syzkaller0>
[  596.316407][T27677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.324547][T27677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.354084][T27671] tipc: Resetting bearer <eth:syzkaller0>
[  596.361614][T27671] tipc: Disabling bearer <eth:syzkaller0>
[  596.450030][T27355] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  596.486143][T27355] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  596.501560][T27687] netlink: 220 bytes leftover after parsing attributes in process `syz.5.8655'.
[  596.519301][T27355] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  596.539424][T27355] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  596.553836][T27355] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  596.635678][   T28] audit: type=1400 audit(2000000382.421:1136): avc:  denied  { write } for  pid=27689 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  596.709774][   T28] audit: type=1400 audit(2000000382.496:1137): avc:  denied  { write } for  pid=27713 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  596.914459][   T28] audit: type=1400 audit(2000000382.683:1138): avc:  denied  { write } for  pid=27724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  596.970445][   T28] audit: type=1400 audit(2000000382.730:1139): avc:  denied  { write } for  pid=27748 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  597.129369][T27355] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  597.151971][T27355] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  597.165284][T27355] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  597.230653][T27786] netlink: 'syz.5.8661': attribute type 1 has an invalid length.
[  597.273282][T27355] 8021q: adding VLAN 0 to HW filter on device bond0
[  597.286631][T27355] 8021q: adding VLAN 0 to HW filter on device team0
[  597.297190][T24617] bridge0: port 1(bridge_slave_0) entered blocking state
[  597.304317][T24617] bridge0: port 1(bridge_slave_0) entered forwarding state
[  597.319758][T24617] bridge0: port 2(bridge_slave_1) entered blocking state
[  597.326902][T24617] bridge0: port 2(bridge_slave_1) entered forwarding state
[  597.448074][T27355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  598.236608][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  598.236639][   T28] audit: type=1400 audit(2000000383.919:1142): avc:  denied  { write } for  pid=27797 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  598.673271][T27855] netlink: 220 bytes leftover after parsing attributes in process `syz.1.8667'.
[  598.765589][T27355] 8021q: adding VLAN 0 to HW filter on device batadv0
[  598.773362][   T28] audit: type=1400 audit(2000000384.414:1143): avc:  denied  { write } for  pid=27861 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  598.962566][T27355] veth0_vlan: entered promiscuous mode
[  598.994852][   T28] audit: type=1400 audit(2000000384.630:1144): avc:  denied  { write } for  pid=27868 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  599.048777][T27355] veth1_vlan: entered promiscuous mode
[  599.077200][T27889] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  599.090503][T27889] syzkaller0: entered promiscuous mode
[  599.096093][   T28] audit: type=1400 audit(2000000384.723:1145): avc:  denied  { write } for  pid=27890 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  599.119795][T27889] syzkaller0: entered allmulticast mode
[  599.146671][T27889] tipc: Resetting bearer <eth:syzkaller0>
[  599.160230][T27355] veth0_macvtap: entered promiscuous mode
[  599.167571][T27888] tipc: Resetting bearer <eth:syzkaller0>
[  599.175074][T27888] tipc: Disabling bearer <eth:syzkaller0>
[  599.186898][T27355] veth1_macvtap: entered promiscuous mode
[  599.205057][T27355] batman_adv: batadv0: Interface activated: batadv_slave_0
[  599.230172][T27355] batman_adv: batadv0: Interface activated: batadv_slave_1
[  599.257568][   T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  599.273352][   T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  599.307800][   T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  599.326961][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  599.385134][   T28] audit: type=1400 audit(2000000384.995:1146): avc:  denied  { write } for  pid=27892 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  599.463578][   T28] audit: type=1400 audit(2000000385.051:1147): avc:  denied  { write } for  pid=27912 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  599.600538][   T28] audit: type=1400 audit(2000000385.201:1148): avc:  denied  { write } for  pid=27918 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  599.656446][   T28] audit: type=1400 audit(2000000385.257:1149): avc:  denied  { write } for  pid=27930 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  599.851186][   T28] audit: type=1400 audit(2000000385.434:1150): avc:  denied  { write } for  pid=27932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  599.907112][   T28] audit: type=1400 audit(2000000385.481:1151): avc:  denied  { write } for  pid=27948 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  601.266442][T28016] netlink: 'syz.3.8689': attribute type 1 has an invalid length.
[  601.280117][T28016] netlink: 'syz.3.8689': attribute type 2 has an invalid length.
[  601.288892][T28016] netlink: 'syz.3.8689': attribute type 10 has an invalid length.
[  601.296899][T28016] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  601.304956][T28016] batman_adv: batadv0: Removing interface: batadv_slave_0
[  601.314283][T28016] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  601.322232][T28016] batman_adv: batadv0: Removing interface: batadv_slave_1
[  601.714641][T28086] netlink: 'syz.6.8695': attribute type 2 has an invalid length.
[  601.778282][T28095] netlink: 'syz.6.8697': attribute type 10 has an invalid length.
[  602.592325][T28211] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31
[  603.019577][T28287] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31
[  603.082603][T28291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8735'.
[  603.106954][T28291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8735'.
[  603.984744][T28384] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.8743'.
[  604.016718][T28361] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.8743'.
[  604.133772][T28425] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31
[  604.201352][T28433] loop6: detected capacity change from 0 to 512
[  604.253139][T28433] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  604.278363][T28433] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  604.290846][T28448] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8754'.
[  604.528003][T28454] netlink: 'syz.1.8757': attribute type 10 has an invalid length.
[  604.616757][T28458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8758'.
[  605.197614][T28461] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  605.197614][T28461] Please contact the netfilter-devel mailing list or update your nftables rules.
[  605.252421][T28462] netlink: 'syz.5.8759': attribute type 29 has an invalid length.
[  605.772444][T25291] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  605.993394][T28481] netlink: 220 bytes leftover after parsing attributes in process `syz.1.8761'.
[  606.048638][T28486] loop5: detected capacity change from 0 to 512
[  606.111491][T28486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  606.128623][T28493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8771'.
[  606.146447][T28486] ext4 filesystem being mounted at /417/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  606.306661][T28495] loop3: detected capacity change from 0 to 512
[  606.322588][T28495] ext4: Unknown parameter 'func'
[  606.570699][T28506] netlink: 14776 bytes leftover after parsing attributes in process `syz.6.8776'.
[  607.250057][T28521] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  607.264980][T28521] syzkaller0: entered promiscuous mode
[  607.284196][T28521] syzkaller0: entered allmulticast mode
[  607.332169][T28527] tipc: Resetting bearer <eth:syzkaller0>
[  607.369934][T28530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8786'.
[  607.423789][T28534] netlink: 11576 bytes leftover after parsing attributes in process `syz.6.8788'.
[  607.543812][T28519] tipc: Resetting bearer <eth:syzkaller0>
[  607.561081][T28519] tipc: Disabling bearer <eth:syzkaller0>
[  607.695102][T28543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8792'.
[  607.736624][T28543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8792'.
[  607.763439][T28543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8792'.
[  608.273278][T20943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  608.680212][T28573] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  608.694346][T28573] syzkaller0: entered promiscuous mode
[  608.706069][T28573] syzkaller0: entered allmulticast mode
[  608.796825][T28574] tipc: Resetting bearer <eth:syzkaller0>
[  608.827947][T28578] loop1: detected capacity change from 0 to 512
[  608.856913][T28572] tipc: Resetting bearer <eth:syzkaller0>
[  608.879969][T28578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  608.906534][T28578] ext4 filesystem being mounted at /489/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  608.935637][T28572] tipc: Disabling bearer <eth:syzkaller0>
[  609.094713][T28591] netlink: 'syz.5.8805': attribute type 1 has an invalid length.
[  609.177559][T28591] netlink: 'syz.5.8805': attribute type 2 has an invalid length.
[  610.255000][T18566] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  610.267708][ T6242] tipc: Node number set to 1650058804
[  610.325303][T28599] syzkaller0: entered promiscuous mode
[  610.331124][T28599] syzkaller0: entered allmulticast mode
[  610.390970][T28603] netlink: 'syz.4.8810': attribute type 1 has an invalid length.
[  610.400724][T28603] netlink: 'syz.4.8810': attribute type 2 has an invalid length.
[  610.428300][T28606] __nla_validate_parse: 2 callbacks suppressed
[  610.428322][T28606] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8812'.
[  611.800673][T28628] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  611.807837][T28628] syzkaller0: entered promiscuous mode
[  611.813394][T28628] syzkaller0: entered allmulticast mode
[  612.102293][T28629] tipc: Resetting bearer <eth:syzkaller0>
[  612.136278][T28627] tipc: Resetting bearer <eth:syzkaller0>
[  612.229140][T28631] netlink: 'syz.6.8821': attribute type 5 has an invalid length.
[  612.239807][T28627] tipc: Disabling bearer <eth:syzkaller0>
[  612.295472][T28644] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8826'.
[  612.383939][T28645] netlink: 220 bytes leftover after parsing attributes in process `syz.1.8825'.
[  613.833241][T28708] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8833'.
[  614.641824][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  614.641843][   T28] audit: type=1400 audit(2000000399.275:1160): avc:  denied  { write } for  pid=28713 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  614.801595][T28731] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8837'.
[  614.829573][   T28] audit: type=1400 audit(2000000399.443:1161): avc:  denied  { write } for  pid=28726 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  615.283679][T28736] netlink: 'syz.4.8838': attribute type 5 has an invalid length.
[  615.638186][   T28] audit: type=1400 audit(2000000400.201:1162): avc:  denied  { write } for  pid=28741 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  615.714941][   T28] audit: type=1400 audit(2000000400.286:1163): avc:  denied  { write } for  pid=28780 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  615.764359][T28786] netlink: 220 bytes leftover after parsing attributes in process `syz.6.8844'.
[  615.814565][T28771] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8845'.
[  615.839241][T28771] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8845'.
[  616.084901][T28814] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8848'.
[  616.693710][T28876] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.8850'.
[  618.139787][T28886] netlink: 'syz.5.8855': attribute type 5 has an invalid length.
[  618.203817][T28897] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  618.239882][T28897] syzkaller0: entered promiscuous mode
[  618.260493][T28897] syzkaller0: entered allmulticast mode
[  618.979369][T28906] tipc: Resetting bearer <eth:syzkaller0>
[  619.046435][T28896] tipc: Resetting bearer <eth:syzkaller0>
[  619.139211][T28896] tipc: Disabling bearer <eth:syzkaller0>
[  619.303212][T28931] netlink: 'syz.6.8871': attribute type 5 has an invalid length.
[  619.506094][T28952] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8877'.
[  619.532750][T28952] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8877'.
[  619.648821][T28958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8875'.
[  619.696664][T28958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8875'.
[  619.771237][T28958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8875'.
[  620.272492][T28992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8879'.
[  620.396184][T29003] gretap1: entered allmulticast mode
[  620.441339][T29009] netlink: 'syz.3.8885': attribute type 1 has an invalid length.
[  620.452982][T29009] netlink: 'syz.3.8885': attribute type 2 has an invalid length.
[  620.472014][T29011] netlink: 'syz.4.8886': attribute type 10 has an invalid length.
[  620.512143][T29011] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  620.567247][T29011] team0: Port device netdevsim2 added
[  621.869508][T29155] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8901'.
[  622.121286][T29168] netlink: 220 bytes leftover after parsing attributes in process `syz.1.8902'.
[  622.144241][T29170] loop5: detected capacity change from 0 to 512
[  622.177263][T29171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8907'.
[  622.220903][T29170] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  622.247510][T29170] ext4 filesystem being mounted at /442/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  623.236226][T29189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8914'.
[  623.303213][T29193] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8916'.
[  623.403188][T29198] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  623.415761][T29198] syzkaller0: entered promiscuous mode
[  623.426270][T29198] syzkaller0: entered allmulticast mode
[  623.437873][T29197] tipc: Resetting bearer <eth:syzkaller0>
[  623.457686][T29197] tipc: Disabling bearer <eth:syzkaller0>
[  623.496156][T29204] netlink: 'syz.1.8921': attribute type 10 has an invalid length.
[  623.514677][T29204] bridge0: port 4(netdevsim2) entered disabled state
[  623.529628][T29204] netdevsim netdevsim1 netdevsim2: left allmulticast mode
[  623.546659][T29204] netdevsim netdevsim1 netdevsim2: left promiscuous mode
[  623.575771][T29204] bridge0: port 4(netdevsim2) entered disabled state
[  623.606579][T29204] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  623.629859][T29204] team0: Port device netdevsim2 added
[  623.690716][T20943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  624.009784][T29233] syzkaller0: entered promiscuous mode
[  624.015472][T29233] syzkaller0: entered allmulticast mode
[  624.068770][T29244] netlink: 'syz.4.8940': attribute type 10 has an invalid length.
[  624.086339][T29246] loop1: detected capacity change from 0 to 512
[  624.122716][T29246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  624.131302][T29248] netlink: 'syz.5.8941': attribute type 21 has an invalid length.
[  624.160377][T29246] ext4 filesystem being mounted at /513/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  624.172894][T29248] netlink: 156 bytes leftover after parsing attributes in process `syz.5.8941'.
[  624.349186][T18566] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  624.465519][T29277] netlink: 'syz.6.8954': attribute type 10 has an invalid length.
[  624.498104][T29282] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8955'.
[  624.525223][T29282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8955'.
[  624.545488][T29282] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8955'.
[  624.576756][T29290] loop4: detected capacity change from 0 to 512
[  624.618817][T29290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  624.642369][T29290] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  624.897296][T27041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  624.908837][T29316] netlink: 'syz.5.8968': attribute type 10 has an invalid length.
[  625.021256][   T28] audit: type=1400 audit(2000000408.979:1164): avc:  denied  { setopt } for  pid=29330 comm="syz.6.8973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  625.145972][T29341] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8977'.
[  625.223303][T29341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  625.250646][T29341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  625.271712][T29341] bond0 (unregistering): Released all slaves
[  626.110967][T29434] loop1: detected capacity change from 0 to 512
[  626.190794][T29434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  626.264063][T29434] ext4 filesystem being mounted at /519/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  626.866575][T29462] syzkaller0: entered promiscuous mode
[  626.872296][T29462] syzkaller0: entered allmulticast mode
[  627.036855][T18566] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  627.932790][T29513] loop6: detected capacity change from 0 to 512
[  627.962544][T29513] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  627.985631][T29513] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  629.052143][T25291] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  629.592528][T29597] __nla_validate_parse: 3 callbacks suppressed
[  629.592545][T29597] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9023'.
[  629.811402][T29597] netlink: 56 bytes leftover after parsing attributes in process `syz.6.9023'.
[  630.267828][T29606] loop5: detected capacity change from 0 to 512
[  630.296624][T29606] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  630.320019][T29606] ext4 filesystem being mounted at /460/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  631.039290][T29630] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9036'.
[  631.048455][T29630] netlink: 56 bytes leftover after parsing attributes in process `syz.6.9036'.
[  631.236492][T20943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  631.329539][T29636] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9039'.
[  631.421988][T29636] bridge0: port 3(bond0) entered disabled state
[  631.445121][T29636] bond0 (unregistering): left allmulticast mode
[  631.461343][T29636] bond_slave_0: left allmulticast mode
[  631.467936][T29636] bond_slave_1: left allmulticast mode
[  631.473622][T29636] bridge0: port 3(bond0) entered disabled state
[  631.497798][T29636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  631.529591][T29636] bond_slave_0: left promiscuous mode
[  631.544173][T29647] loop4: detected capacity change from 0 to 512
[  631.551043][T29636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  631.560338][T29647] ext4: Unknown parameter 'func'
[  631.612115][T29636] bond_slave_1: left promiscuous mode
[  631.619943][T29636] bond0 (unregistering): Released all slaves
[  631.823966][T29679] loop3: detected capacity change from 0 to 512
[  631.844307][T29679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  631.861591][T29679] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  632.546830][T29772] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9055'.
[  632.689865][T29793] netlink: 14 bytes leftover after parsing attributes in process `syz.6.9064'.
[  632.903441][T27355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  633.900162][T29793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  633.937336][T29793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  633.964013][T29793] bond0 (unregistering): Released all slaves
[  634.060139][T29924] bridge0: port 3(gretap0) entered blocking state
[  634.072933][T29924] bridge0: port 3(gretap0) entered disabled state
[  634.106683][T29930] loop4: detected capacity change from 0 to 512
[  634.109813][T29924] gretap0: entered allmulticast mode
[  634.133962][T29924] gretap0: entered promiscuous mode
[  634.140171][T29924] bridge0: port 3(gretap0) entered blocking state
[  634.146680][T29924] bridge0: port 3(gretap0) entered forwarding state
[  634.156786][T29930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  634.175707][T29928] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9074'.
[  634.186897][   T28] audit: type=1400 audit(2000000417.551:1165): avc:  denied  { remount } for  pid=29925 comm="syz.5.9076" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  634.190258][T29928] netlink: 56 bytes leftover after parsing attributes in process `syz.6.9074'.
[  634.219919][T29930] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  634.495461][T29946] netlink: 'syz.1.9082': attribute type 5 has an invalid length.
[  634.620387][T29954] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9085'.
[  636.034645][T27041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  636.330817][T29979] netlink: 220 bytes leftover after parsing attributes in process `syz.1.9092'.
[  636.342759][T29980] netlink: 'syz.4.9094': attribute type 5 has an invalid length.
[  636.932928][T30005] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9107'.
[  637.628424][T30032] netlink: 'syz.6.9120': attribute type 5 has an invalid length.
[  637.781015][ T3393] page_pool_release_retry() stalled pool shutdown: id 314, 1 inflight 60 sec
[  637.893596][T30053] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9129'.
[  638.753508][T30079] gretap0: left allmulticast mode
[  638.770877][T30079] gretap0: left promiscuous mode
[  638.790704][T30079] bridge0: port 3(gretap0) entered disabled state
[  638.809534][T30079] bridge_slave_1: left allmulticast mode
[  638.815565][T30079] bridge_slave_1: left promiscuous mode
[  638.825620][T30079] bridge0: port 2(bridge_slave_1) entered disabled state
[  639.005741][T30079] bridge_slave_0: left allmulticast mode
[  639.013204][T30079] bridge_slave_0: left promiscuous mode
[  639.020707][T30079] bridge0: port 1(bridge_slave_0) entered disabled state
[  639.036509][T30092] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9146'.
[  640.500804][T30135] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9162'.
[  640.519422][T30135] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9162'.
[  640.586895][T30137] netlink: 'syz.6.9164': attribute type 10 has an invalid length.
[  640.595423][T30137] netlink: 'syz.6.9164': attribute type 10 has an invalid length.
[  641.051185][T30137] team0: Port device netdevsim2 removed
[  641.141699][T30151] netlink: 108 bytes leftover after parsing attributes in process `syz.1.9168'.
[  641.192948][T30156] netlink: 'syz.3.9165': attribute type 5 has an invalid length.
[  641.663066][T30208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9191'.
[  641.681045][T30208] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9191'.
[  641.696376][T30208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9191'.
[  641.924832][T30235] loop6: detected capacity change from 0 to 512
[  641.945713][T30235] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  641.993045][T30235] ext4 filesystem being mounted at /258/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  642.736782][T30257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9209'.
[  642.759915][T30259] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9210'.
[  642.769667][T30257] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9209'.
[  642.787158][T30257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9209'.
[  642.919511][T25291] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  643.471572][T30284] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9220'.
[  643.506945][T30284] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9220'.
[  644.223721][T30293] loop3: detected capacity change from 0 to 512
[  644.250410][T30293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  644.278199][T30291] netlink: 14 bytes leftover after parsing attributes in process `syz.6.9224'.
[  644.309523][T30297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9225'.
[  644.327947][T30293] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  644.354096][T30297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9225'.
[  645.250040][T30334] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  645.269666][T27355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  645.406946][T30351] loop3: detected capacity change from 0 to 512
[  645.446988][T30351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  645.460723][T30351] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  646.453861][T27355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  649.093955][T30422] __nla_validate_parse: 6 callbacks suppressed
[  649.093970][T30422] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9275'.
[  649.875783][T30436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9281'.
[  649.885404][T30436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9281'.
[  650.170373][T30461] netlink: 220 bytes leftover after parsing attributes in process `syz.4.9282'.
[  650.941612][T30508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9286'.
[  651.045009][T30513] loop5: detected capacity change from 0 to 512
[  651.082799][T30513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  651.150576][T30513] ext4 filesystem being mounted at /525/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  651.305689][T30527] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9293'.
[  651.316787][T30528] netlink: 'syz.3.9292': attribute type 5 has an invalid length.
[  651.906975][T30535] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9295'.
[  651.983760][T20943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  652.009265][T30539] loop4: detected capacity change from 0 to 2048
[  652.040883][T30539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  652.061969][T30539] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  652.155671][T30542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9299'.
[  652.175829][   T28] audit: type=1400 audit(2000000434.405:1166): avc:  denied  { write } for  pid=30538 comm="syz.4.9297" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  653.141153][T27041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  653.264721][T30604] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9306'.
[  653.318482][T30604] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9306'.
[  653.607677][T30616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  653.715422][T30616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  653.758287][T30616] bond0 (unregistering): Released all slaves
[  654.158047][T30667] veth0_to_bond: default FDB implementation only supports local addresses
[  655.087295][T30771] __nla_validate_parse: 9 callbacks suppressed
[  655.087339][T30771] netlink: 220 bytes leftover after parsing attributes in process `syz.6.9335'.
[  655.145154][T30773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9336'.
[  655.191644][T30773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9336'.
[  655.266583][T30778] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.9338'.
[  655.289734][T30778] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  655.321174][T30784] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9341'.
[  655.450248][T30790] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9344'.
[  655.473119][T30794] loop1: detected capacity change from 0 to 512
[  655.479852][T30790] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9344'.
[  655.512332][T30794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  655.538270][T30794] ext4 filesystem being mounted at /589/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  655.663162][T30805] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9349'.
[  655.698961][T30807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9350'.
[  655.715300][T30809] loop5: detected capacity change from 0 to 2048
[  655.869555][T30812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9350'.
[  655.885941][T30809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  655.941089][T30809] ext4 filesystem being mounted at /535/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  655.996294][   T28] audit: type=1400 audit(2000000442.973:1167): avc:  denied  { write } for  pid=30808 comm="syz.5.9351" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  656.274705][   T28] audit: type=1400 audit(2000000443.189:1168): avc:  denied  { write } for  pid=30808 comm="syz.5.9351" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  656.696883][T18566] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  656.707365][T20943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  658.445482][T30907] loop5: detected capacity change from 0 to 2048
[  658.475936][T30907] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  658.502406][T30907] ext4 filesystem being mounted at /546/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  658.517757][   T28] audit: type=1400 audit(2000000445.332:1169): avc:  denied  { write } for  pid=30906 comm="syz.5.9385" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  658.765446][   T28] audit: type=1400 audit(2000000445.566:1170): avc:  denied  { write } for  pid=30906 comm="syz.5.9385" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  659.400614][T20943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  659.593640][T30979] lo speed is unknown, defaulting to 1000
[  659.603682][T30979] gretap0 speed is unknown, defaulting to 1000
[  659.674871][T31008] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  660.813962][T24613] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.984410][T30979] bridge0: port 1(bridge_slave_0) entered blocking state
[  660.991645][T30979] bridge0: port 1(bridge_slave_0) entered disabled state
[  660.998880][T30979] bridge_slave_0: entered allmulticast mode
[  661.007153][T30979] bridge_slave_0: entered promiscuous mode
[  661.014903][T30979] bridge0: port 2(bridge_slave_1) entered blocking state
[  661.022127][T30979] bridge0: port 2(bridge_slave_1) entered disabled state
[  661.029321][T30979] bridge_slave_1: entered allmulticast mode
[  661.036415][T30979] bridge_slave_1: entered promiscuous mode
[  661.047843][T31137] netlink: 'syz.3.9413': attribute type 39 has an invalid length.
[  661.066212][T24613] team0: Port device netdevsim2 removed
[  661.081376][T24613] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.176899][T24613] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.198343][T30979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  661.209795][T30979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  661.260173][T30979] team0: Port device team_slave_0 added
[  661.267150][T30979] team0: Port device team_slave_1 added
[  661.297091][T24613] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.309426][T30979] batman_adv: batadv0: Adding interface: batadv_slave_0
[  661.317441][T30979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  661.361404][T30979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  661.388152][T30979] batman_adv: batadv0: Adding interface: batadv_slave_1
[  661.398191][T30979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  661.429515][T30979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  661.470373][T31181] __nla_validate_parse: 13 callbacks suppressed
[  661.470394][T31181] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.9421'.
[  661.488118][T31181] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  661.589104][T30979] hsr_slave_0: entered promiscuous mode
[  661.611119][T30979] hsr_slave_1: entered promiscuous mode
[  661.622496][T30979] debugfs: 'hsr0' already exists in 'hsr'
[  661.628621][T30979] Cannot create hsr debugfs directory
[  661.911066][   T28] audit: type=1400 audit(2000000448.513:1171): avc:  denied  { write } for  pid=31217 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  661.994934][   T28] audit: type=1400 audit(2000000448.588:1172): avc:  denied  { write } for  pid=31246 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  665.102095][T31252] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.9435'.
[  665.111683][T31252] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  665.119647][ T3028] 8021q: adding VLAN 0 to HW filter on device eth9
[  665.143228][T24613] tipc: Disabling bearer <udp:syz0>
[  665.148672][T24613] tipc: Left network mode
[  665.149458][T31313] Ÿë
: port 1(ip6gretap0) entered blocking state
[  665.160117][T31313] Ÿë
: port 1(ip6gretap0) entered disabled state
[  665.166904][T31313] ip6gretap0: entered allmulticast mode
[  665.174102][T31313] ip6gretap0: entered promiscuous mode
[  665.217905][T24613] hsr_slave_0: left promiscuous mode
[  665.231259][T24613] hsr_slave_1: left promiscuous mode
[  665.248293][T24613] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  665.262412][T24613] batman_adv: batadv0: Removing interface: batadv_slave_0
[  665.272278][T24613] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  665.282140][T31321] netlink: 'syz.6.9443': attribute type 5 has an invalid length.
[  665.287081][T24613] batman_adv: batadv0: Removing interface: batadv_slave_1
[  665.300842][T31320] netlink: 'syz.3.9445': attribute type 10 has an invalid length.
[  665.321238][T24613] veth1_macvtap: left promiscuous mode
[  665.328197][T24613] veth0_macvtap: left promiscuous mode
[  665.339073][T24613] veth1_vlan: left promiscuous mode
[  665.357900][T31327] netlink: 'syz.3.9445': attribute type 10 has an invalid length.
[  665.418115][T31329] netlink: 'syz.5.9448': attribute type 1 has an invalid length.
[  665.433729][T31329] netlink: 112865 bytes leftover after parsing attributes in process `syz.5.9448'.
[  665.479620][T24613] team0 (unregistering): Port device team_slave_1 removed
[  665.497613][T24613] team0 (unregistering): Port device team_slave_0 removed
[  665.559572][T31320] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  665.581108][T31320] team0: Port device netdevsim2 added
[  665.595097][T31327] team0: Port device netdevsim2 removed
[  665.844709][   T28] audit: type=1400 audit(2000000452.191:1173): avc:  denied  { write } for  pid=31340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  665.881283][T31363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9457'.
[  665.902909][T31363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9457'.
[  665.963351][   T28] audit: type=1400 audit(2000000452.303:1174): avc:  denied  { write } for  pid=31366 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  666.202625][   T28] audit: type=1400 audit(2000000452.519:1175): avc:  denied  { write } for  pid=31375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  666.238470][T30979] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  666.255903][T30979] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  666.264389][T30979] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  666.290798][T30979] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  666.308764][   T28] audit: type=1400 audit(2000000452.622:1176): avc:  denied  { write } for  pid=31392 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  666.336360][T30979] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  666.404283][T30979] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  666.413180][T30979] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  666.426518][T30979] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  666.491486][   T28] audit: type=1400 audit(2000000452.790:1177): avc:  denied  { create } for  pid=31408 comm="syz.4.9468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  666.548247][T30979] 8021q: adding VLAN 0 to HW filter on device bond0
[  666.573232][T30979] 8021q: adding VLAN 0 to HW filter on device team0
[  666.592847][  T235] bridge0: port 1(bridge_slave_0) entered blocking state
[  666.600054][  T235] bridge0: port 1(bridge_slave_0) entered forwarding state
[  666.625500][ T1764] bridge0: port 2(bridge_slave_1) entered blocking state
[  666.632772][ T1764] bridge0: port 2(bridge_slave_1) entered forwarding state
[  666.672673][   T28] audit: type=1400 audit(2000000452.958:1178): avc:  denied  { write } for  pid=31401 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  666.725887][T31430] bridge_slave_1: left allmulticast mode
[  666.754808][T31430] bridge_slave_1: left promiscuous mode
[  666.769614][   T28] audit: type=1400 audit(2000000453.052:1179): avc:  denied  { write } for  pid=31431 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  666.776456][T31430] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.811495][T31437] netlink: 'syz.3.9470': attribute type 5 has an invalid length.
[  666.982233][   T28] audit: type=1400 audit(2000000453.249:1180): avc:  denied  { write } for  pid=31439 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  667.045725][   T28] audit: type=1400 audit(2000000453.305:1181): avc:  denied  { write } for  pid=31454 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  667.097255][T31430] bridge_slave_0: left allmulticast mode
[  667.111539][T31430] bridge_slave_0: left promiscuous mode
[  667.131958][T31430] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.294194][   T28] audit: type=1400 audit(2000000453.539:1182): avc:  denied  { write } for  pid=31457 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  667.489230][T30979] 8021q: adding VLAN 0 to HW filter on device batadv0
[  667.638881][T31500] netlink: 'syz.4.9482': attribute type 2 has an invalid length.
[  667.669931][T31500] netlink: 'syz.4.9482': attribute type 8 has an invalid length.
[  667.696356][T31500] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9482'.
[  667.743487][T31521] netlink: 220 bytes leftover after parsing attributes in process `syz.5.9480'.
[  667.812370][T30979] veth0_vlan: entered promiscuous mode
[  667.834463][T31517] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9483'.
[  667.842810][T30979] veth1_vlan: entered promiscuous mode
[  667.892138][T30979] veth0_macvtap: entered promiscuous mode
[  667.903492][T31517] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9483'.
[  667.923157][T30979] veth1_macvtap: entered promiscuous mode
[  667.971804][T30979] batman_adv: batadv0: Interface activated: batadv_slave_0
[  668.016169][T30979] batman_adv: batadv0: Interface activated: batadv_slave_1
[  668.066441][ T1677] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  668.095758][ T1677] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  668.172947][ T1677] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  668.199790][ T1677] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  668.309983][T31546] loop1: detected capacity change from 0 to 512
[  668.326579][T31546] ext4: Unknown parameter 'func'
[  669.548975][T31647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9497'.
[  669.557277][T31644] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9496'.
[  669.570086][T31647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9497'.
[  669.587592][T31647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9497'.
[  669.604015][T31644] netlink: 56 bytes leftover after parsing attributes in process `syz.6.9496'.
[  669.814299][T31676] loop3: detected capacity change from 0 to 512
[  669.854120][T31676] ext4: Unknown parameter 'func'
[  670.667827][T31719] netlink: 'syz.5.9510': attribute type 13 has an invalid length.
[  670.685116][T31719] netlink: 172 bytes leftover after parsing attributes in process `syz.5.9510'.
[  671.828867][T31719] erspan0: refused to change device tx_queue_len
[  672.048741][T31819] loop1: detected capacity change from 0 to 512
[  672.132465][T31819] ext4: Unknown parameter 'func'
[  672.177923][   T28] kauditd_printk_skb: 13 callbacks suppressed
[  672.185461][   T28] audit: type=1400 audit(2000000458.115:1196): avc:  denied  { write } for  pid=31821 comm="syz.6.9522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  673.085609][T31828] netlink: 'syz.6.9524': attribute type 1 has an invalid length.
[  673.093615][T31828] netlink: 'syz.6.9524': attribute type 4 has an invalid length.
[  673.114862][T31828] __nla_validate_parse: 3 callbacks suppressed
[  673.114879][T31828] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.9524'.
[  673.248597][T31834] netlink: 'syz.1.9526': attribute type 2 has an invalid length.
[  673.257352][T31834] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.9526'.
[  673.311448][T31839] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9529'.
[  673.321019][T31839] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9529'.
[  673.641437][T31858] loop6: detected capacity change from 0 to 512
[  673.650315][T31858] ext4: Unknown parameter 'func'
[  675.936286][T31897] netlink: 80128 bytes leftover after parsing attributes in process `syz.3.9553'.
[  676.976347][T31925] netlink: 'syz.4.9564': attribute type 5 has an invalid length.
[  677.562789][T31942] netlink: 220 bytes leftover after parsing attributes in process `syz.1.9570'.
[  677.806424][T31946] netlink: 'syz.3.9574': attribute type 3 has an invalid length.
[  677.853607][T31946] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.9574'.
[  677.865894][T31950] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9575'.
[  678.080824][T31956] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.9579'.
[  678.192296][T31963] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9581'.
[  678.224830][T31965] netlink: 'syz.3.9582': attribute type 10 has an invalid length.
[  678.250235][T31965] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  678.286908][T31970] netlink: 'syz.3.9582': attribute type 10 has an invalid length.
[  678.309486][T31965] team0: Port device netdevsim2 added
[  678.360621][T31970] team0: Port device netdevsim2 removed
[  678.412686][T31974] netlink: 'syz.5.9585': attribute type 10 has an invalid length.
[  678.436250][T31974] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  678.473408][T31974] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  678.513503][T31974] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  678.675767][T31979] netlink: 'syz.3.9586': attribute type 5 has an invalid length.
[  679.205097][T32001] netlink: 'syz.4.9596': attribute type 10 has an invalid length.
[  679.230036][T32001] netlink: 'syz.4.9596': attribute type 10 has an invalid length.
[  679.249010][T32001] team0: Port device netdevsim2 removed
[  679.355774][T32008] __nla_validate_parse: 2 callbacks suppressed
[  679.355810][T32008] netlink: 1010 bytes leftover after parsing attributes in process `syz.6.9599'.
[  679.408411][T32008] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  679.540476][T32018] netlink: 220 bytes leftover after parsing attributes in process `syz.1.9598'.
[  679.812125][T32032] syzkaller0: entered promiscuous mode
[  679.824904][T32032] syzkaller0: entered allmulticast mode
[  679.971540][T32036] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.9610'.
[  680.127770][T32044] netlink: 'syz.6.9612': attribute type 5 has an invalid length.
[  680.292193][T32054] netlink: 'syz.4.9618': attribute type 10 has an invalid length.
[  680.311955][T32052] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.9617'.
[  680.344281][T32054] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  680.359250][T32055] netlink: 'syz.4.9618': attribute type 10 has an invalid length.
[  680.373635][T32054] team0: Port device netdevsim2 added
[  680.400003][T32055] team0: Port device netdevsim2 removed
[  680.762650][T32069] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.9624'.
[  681.044945][T32090] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9634'.
[  681.157059][T32092] netlink: 'syz.4.9635': attribute type 10 has an invalid length.
[  681.183228][T32092] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  681.203286][T32092] team0: Port device netdevsim2 added
[  681.218923][T32092] netlink: 'syz.4.9635': attribute type 10 has an invalid length.
[  681.244143][T32092] team0: Port device netdevsim2 removed
[  681.710849][T32121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9646'.
[  681.754586][T32121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9646'.
[  681.827050][T32107] lo speed is unknown, defaulting to 1000
[  681.843074][T32107] gretap0 speed is unknown, defaulting to 1000
[  681.986924][T32107] bridge0: port 1(bridge_slave_0) entered blocking state
[  681.994360][T32107] bridge0: port 1(bridge_slave_0) entered disabled state
[  682.007035][T32107] bridge_slave_0: entered allmulticast mode
[  682.019720][T32107] bridge_slave_0: entered promiscuous mode
[  682.036256][T32107] bridge0: port 2(bridge_slave_1) entered blocking state
[  682.044626][T32107] bridge0: port 2(bridge_slave_1) entered disabled state
[  682.055166][T32107] bridge_slave_1: entered allmulticast mode
[  682.062157][T32107] bridge_slave_1: entered promiscuous mode
[  682.084191][T32107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  682.095231][T32107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  682.134413][T32107] team0: Port device team_slave_0 added
[  682.146706][T32149] netlink: 'syz.6.9655': attribute type 10 has an invalid length.
[  682.153558][T32107] team0: Port device team_slave_1 added
[  682.175337][T32149] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  682.186725][T32152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9656'.
[  682.186831][T32149] team0: Port device netdevsim2 added
[  682.202531][T32152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9656'.
[  682.212852][T32149] netlink: 'syz.6.9655': attribute type 10 has an invalid length.
[  682.237015][T32149] team0: Port device netdevsim2 removed
[  682.245079][T32107] batman_adv: batadv0: Adding interface: batadv_slave_0
[  682.259908][T32107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  682.298665][T32107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  682.311983][T32154] bridge_slave_1: left allmulticast mode
[  682.318026][T32154] bridge_slave_1: left promiscuous mode
[  682.325115][T32154] bridge0: port 2(bridge_slave_1) entered disabled state
[  682.335630][T32154] bridge_slave_0: left allmulticast mode
[  682.346355][T32154] bridge_slave_0: left promiscuous mode
[  682.352214][T32154] bridge0: port 1(bridge_slave_0) entered disabled state
[  682.406924][T32107] batman_adv: batadv0: Adding interface: batadv_slave_1
[  682.413985][T32107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  682.441351][T32107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  682.472821][T32107] hsr_slave_0: entered promiscuous mode
[  682.478993][T32107] hsr_slave_1: entered promiscuous mode
[  682.485175][T32107] debugfs: 'hsr0' already exists in 'hsr'
[  682.491299][T32107] Cannot create hsr debugfs directory
[  682.652007][T32107] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  682.726673][T32107] team0: Port device netdevsim2 removed
[  682.733551][T32107] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  682.809637][T32107] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  682.879746][T32107] bond0: (slave netdevsim0): Releasing backup interface
[  682.895982][T32107] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  682.988226][T32107] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  682.997890][T32107] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  683.019164][T32107] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  683.038167][T32107] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  683.073604][T32107] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  683.086084][T32107] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  683.094844][T32107] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  683.112180][T32107] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  683.169429][T32107] 8021q: adding VLAN 0 to HW filter on device bond0
[  683.185473][T32107] 8021q: adding VLAN 0 to HW filter on device team0
[  683.196878][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  683.204089][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  683.215928][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  683.223109][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  683.243124][T32107] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  683.253582][T32107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  683.408024][T32107] 8021q: adding VLAN 0 to HW filter on device batadv0
[  683.566683][T32107] veth0_vlan: entered promiscuous mode
[  683.583889][T32107] veth1_vlan: entered promiscuous mode
[  683.611662][T32107] veth0_macvtap: entered promiscuous mode
[  683.621253][T32107] veth1_macvtap: entered promiscuous mode
[  683.635209][T32107] batman_adv: batadv0: Interface activated: batadv_slave_0
[  683.648760][T32107] batman_adv: batadv0: Interface activated: batadv_slave_1
[  683.663240][   T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  684.086604][   T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  684.114817][   T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  684.128096][   T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  684.238949][T32241] netlink: 'syz.5.9642': attribute type 39 has an invalid length.
[  684.429759][T32249] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  684.638217][T32255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32255 comm=syz.3.9685
[  685.290456][T32271] __nla_validate_parse: 14 callbacks suppressed
[  685.290489][T32271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9692'.
[  685.322381][T32271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9692'.
[  685.332617][T32271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9692'.
[  685.550467][T32297] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.9704'.
[  685.593794][T32293] netlink: 'syz.6.9703': attribute type 10 has an invalid length.
[  685.602516][T32293] netlink: 2 bytes leftover after parsing attributes in process `syz.6.9703'.
[  685.612443][T32301] netlink: 220 bytes leftover after parsing attributes in process `syz.5.9696'.
[  685.641195][T32293] veth1_virt_wifi: entered promiscuous mode
[  685.654093][T32293] bridge0: port 3(veth1_virt_wifi) entered blocking state
[  685.662686][T32293] bridge0: port 3(veth1_virt_wifi) entered disabled state
[  685.673223][T32293] veth1_virt_wifi: entered allmulticast mode
[  685.687394][T32293] bridge0: port 3(veth1_virt_wifi) entered blocking state
[  685.694684][T32293] bridge0: port 3(veth1_virt_wifi) entered forwarding state
[  685.720055][T32307] netlink: 'syz.1.9707': attribute type 39 has an invalid length.
[  685.922535][T32315] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9710'.
[  685.932354][T32315] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9710'.
[  685.943717][T32315] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9710'.
[  686.094615][T32323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32323 comm=syz.1.9714
[  686.407722][T32345] loop6: detected capacity change from 0 to 512
[  686.417222][T32345] ext4: Unknown parameter 'func'
[  686.433282][T32347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9723'.
[  687.280012][T32368] lo speed is unknown, defaulting to 1000
[  687.286141][T32368] gretap0 speed is unknown, defaulting to 1000
[  687.376609][T32378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32378 comm=syz.3.9736
[  687.465212][T32384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=32384 comm=syz.6.9738
[  687.855609][T32402] loop6: detected capacity change from 0 to 512
[  687.863088][T32402] ext4: Unknown parameter 'func'
[  688.792312][T32432] tun0: tun_chr_ioctl cmd 1074025677
[  688.801614][T32432] tun0: linktype set to 768
[  688.840897][T32427] netlink: 'syz.4.9754': attribute type 10 has an invalid length.
[  688.851108][T32427] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  688.861556][T32427] team0: Port device netdevsim2 added
[  688.872703][T32427] netlink: 'syz.4.9754': attribute type 10 has an invalid length.
[  688.893403][T32427] team0: Port device netdevsim2 removed
[  688.971895][T32446] netlink: 'syz.6.9759': attribute type 5 has an invalid length.
[  689.207600][T32465] loop4: detected capacity change from 0 to 512
[  689.227767][T32465] ext4: Unknown parameter 'func'
[  690.200418][T32487] netlink: 'syz.1.9778': attribute type 10 has an invalid length.
[  690.241520][T32487] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  690.260682][T32494] netlink: 'syz.1.9778': attribute type 10 has an invalid length.
[  690.280981][T32487] team0: Port device netdevsim2 added
[  690.319807][T32494] team0: Port device netdevsim2 removed
[  690.337771][T32494] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  690.360440][T32494] bond0: (slave netdevsim2): Enslaving as an active interface with an up link
[  690.562828][T32503] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  691.322638][T32528] netlink: 'syz.6.9796': attribute type 10 has an invalid length.
[  691.331623][T32528] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  691.346634][T32528] team0: Port device netdevsim2 added
[  691.365961][T32528] netlink: 'syz.6.9796': attribute type 10 has an invalid length.
[  691.406547][T32537] __nla_validate_parse: 24 callbacks suppressed
[  691.406621][T32537] netlink: 68 bytes leftover after parsing attributes in process `syz.5.9799'.
[  691.430103][T32537] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9799'.
[  691.521089][T32528] team0: Port device netdevsim2 removed
[  691.544987][T32544] netlink: 1010 bytes leftover after parsing attributes in process `syz.5.9800'.
[  691.554378][T32544] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  691.608223][T32546] 
€Â0: renamed from pim6reg1
[  691.649690][T32547] netlink: 220 bytes leftover after parsing attributes in process `syz.4.9798'.
[  692.680735][T32564] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.9809'.
[  693.191184][T32591] netlink: 220 bytes leftover after parsing attributes in process `syz.6.9814'.
[  693.746553][T32598] netlink: 'syz.4.9821': attribute type 10 has an invalid length.
[  693.764616][T32598] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  693.788305][T32598] team0: Port device netdevsim2 added
[  693.804716][T32598] netlink: 'syz.4.9821': attribute type 10 has an invalid length.
[  693.868929][T32604] netlink: 'syz.3.9823': attribute type 21 has an invalid length.
[  694.007029][T32598] team0: Port device netdevsim2 removed
[  694.058648][T32607] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9824'.
[  694.172215][T32619] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.9830'.
[  694.200257][T32619] veth0_to_bond: default FDB implementation only supports local addresses
[  695.143397][T32643] netlink: 399 bytes leftover after parsing attributes in process `syz.6.9841'.
[  695.158198][T32643] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16)
[  695.166558][T32643] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  695.405199][T32665] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9851'.
[  695.406434][T32663] netlink: 'syz.1.9850': attribute type 7 has an invalid length.
[  695.951070][T32687] netlink: 'syz.1.9860': attribute type 10 has an invalid length.
[  696.880780][T32719] loop6: detected capacity change from 0 to 512
[  696.900665][T32719] ext4: Unknown parameter 'func'
[  698.117638][T32738] netlink: 'syz.3.9878': attribute type 10 has an invalid length.
[  698.155848][T32738] __nla_validate_parse: 2 callbacks suppressed
[  698.155877][T32738] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9878'.
[  698.290417][T32751] netlink: 220 bytes leftover after parsing attributes in process `syz.6.9877'.
[  699.195447][  T314] netlink: 'syz.5.9895': attribute type 21 has an invalid length.
[  699.271478][  T318] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9898'.
[  699.309099][  T318] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9898'.
[  699.551248][  T323] netlink: 'syz.4.9900': attribute type 10 has an invalid length.
[  699.572664][  T323] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  699.597672][  T323] team0: Port device netdevsim2 added
[  699.605270][  T329] netlink: 'syz.4.9900': attribute type 10 has an invalid length.
[  700.114361][  T329] team0: Port device netdevsim2 removed
[  700.503326][  T350] netlink: 'syz.1.9906': attribute type 1 has an invalid length.
[  700.513496][  T350] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.9906'.
[  700.531277][  T357] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9910'.
[  700.541029][  T357] netlink: 56 bytes leftover after parsing attributes in process `syz.6.9910'.
[  700.599023][  T363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9913'.
[  700.621609][  T363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9913'.
[  701.496628][  T370] netlink: 'syz.1.9916': attribute type 10 has an invalid length.
[  701.504840][  T370] netlink: 55 bytes leftover after parsing attributes in process `syz.1.9916'.
[  701.520635][  T368] netlink: 'syz.4.9914': attribute type 10 has an invalid length.
[  701.544059][  T368] dummy0: entered promiscuous mode
[  701.563998][  T368] dummy0: entered allmulticast mode
[  701.583828][  T368] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  701.627792][  T378] netlink: 'syz.5.9920': attribute type 10 has an invalid length.
[  701.683676][  T387] netlink: 'syz.5.9920': attribute type 10 has an invalid length.
[  701.846514][  T392] netlink: 'syz.3.9924': attribute type 39 has an invalid length.
[  702.393393][  T378] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  702.433489][  T378] team0: Port device netdevsim2 added
[  702.464807][  T387] team0: Port device netdevsim2 removed
[  702.490537][  T387] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  702.508211][  T387] bond0: (slave netdevsim2): Enslaving as an active interface with an up link
[  702.877544][  T427] netlink: 'syz.3.9936': attribute type 10 has an invalid length.
[  703.023936][  T430] netlink: 'syz.5.9937': attribute type 10 has an invalid length.
[  703.791663][  T436] __nla_validate_parse: 4 callbacks suppressed
[  703.791712][  T436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9939'.
[  703.818313][  T436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9939'.
[  703.862284][  T430] team0: Port device veth1_to_hsr added
[  703.932996][T24284] bridge_slave_1: left allmulticast mode
[  703.952432][T24284] bridge_slave_1: left promiscuous mode
[  703.958935][T24284] bridge0: port 2(bridge_slave_1) entered disabled state
[  703.970837][T24284] bridge_slave_0: left allmulticast mode
[  703.977342][T24284] bridge_slave_0: left promiscuous mode
[  703.983552][T24284] bridge0: port 1(bridge_slave_0) entered disabled state
[  704.018316][T24284] ip6gretap0: left allmulticast mode
[  704.033155][T24284] ip6gretap0: left promiscuous mode
[  704.045168][T24284] Ÿë
: port 1(ip6gretap0) entered disabled state
[  704.210083][  T459] netlink: 'syz.5.9947': attribute type 4 has an invalid length.
[  704.228478][  T459] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.9947'.
[  704.499442][  T470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9951'.
[  704.618956][  T470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9951'.
[  704.660253][  T474] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9952'.
[  705.160273][  T488] netlink: 'syz.1.9955': attribute type 10 has an invalid length.
[  705.174230][  T488] netlink: 55 bytes leftover after parsing attributes in process `syz.1.9955'.
[  705.335830][  T504] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9958'.
[  705.407070][  T509] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9963'.
[  705.447987][  T511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9964'.
[  705.819560][T24284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  705.860064][T24284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  705.895703][T24284] bond0 (unregistering): Released all slaves
[  706.133292][ T3393] gretap0 speed is unknown, defaulting to 1000
[  706.139619][ T3393] infiniband syz0: ib_query_port failed (-19)
[  706.146868][  T504] veth1_to_bridge: entered allmulticast mode
[  706.263946][T24284] tipc: Left network mode
[  706.867080][  T547] netlink: 'syz.3.9976': attribute type 10 has an invalid length.
[  707.074265][T24284] hsr_slave_0: left promiscuous mode
[  707.082074][T24284] hsr_slave_1: left promiscuous mode
[  707.087782][T24284] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  707.095250][T24284] batman_adv: batadv0: Removing interface: batadv_slave_0
[  707.102909][T24284] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  707.110336][T24284] batman_adv: batadv0: Removing interface: batadv_slave_1
[  707.131024][T24284] veth1_macvtap: left promiscuous mode
[  707.137677][T24284] veth0_macvtap: left promiscuous mode
[  707.147723][T24284] veth1_vlan: left promiscuous mode
[  707.153985][T24284] veth0_vlan: left promiscuous mode
[  707.304333][T24284] team0 (unregistering): Port device team_slave_1 removed
[  707.325944][T24284] team0 (unregistering): Port device team_slave_0 removed
[  707.380144][T27597] lo speed is unknown, defaulting to 1000
[  707.392292][T27597] syz2: Port: 1 Link DOWN
[  708.280282][  T596] veth1_virt_wifi: left allmulticast mode
[  708.288758][  T596] bridge0: port 3(veth1_virt_wifi) entered disabled state
[  708.297643][  T596] bridge_slave_1: left allmulticast mode
[  708.309480][  T596] bridge_slave_1: left promiscuous mode
[  708.319615][  T596] bridge0: port 2(bridge_slave_1) entered disabled state
[  709.295506][  T596] bridge_slave_0: left allmulticast mode
[  709.301713][  T596] bridge_slave_0: left promiscuous mode
[  709.307640][  T596] bridge0: port 1(bridge_slave_0) entered disabled state
[  709.478163][  T622] syzkaller0: entered promiscuous mode
[  709.483908][  T622] syzkaller0: entered allmulticast mode
[  709.509532][  T626] netlink: 'syz.6.10006': attribute type 21 has an invalid length.
[  709.558923][  T626] lo: entered promiscuous mode
[  710.371868][  T664] __nla_validate_parse: 7 callbacks suppressed
[  710.371916][  T664] netlink: 68 bytes leftover after parsing attributes in process `syz.6.10020'.
[  710.397165][  T664] netlink: 56 bytes leftover after parsing attributes in process `syz.6.10020'.
[  712.246573][  T709] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.10038'.
[  712.322581][  T714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10039'.
[  712.358696][  T714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10039'.
[  712.403030][  T714] netlink: 33 bytes leftover after parsing attributes in process `syz.4.10039'.
[  712.441811][  T714] veth1_to_bridge: entered allmulticast mode
[  712.458082][  T714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10039'.
[  712.467354][  T714] netlink: 33 bytes leftover after parsing attributes in process `syz.4.10039'.
[  715.898573][  T755] netlink: 'syz.1.10056': attribute type 10 has an invalid length.
[  715.936758][  T755] bond0: (slave netdevsim2): Releasing backup interface
[  715.956928][  T765] netlink: 'syz.1.10056': attribute type 10 has an invalid length.
[  715.976175][  T755] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  715.998498][  T755] team0: Port device netdevsim2 added
[  716.027219][  T765] team0: Port device netdevsim2 removed
[  716.052084][  T765] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  716.084397][  T765] bond0: (slave netdevsim2): Enslaving as an active interface with an up link
[  716.242600][  T774] netlink: 68 bytes leftover after parsing attributes in process `syz.5.10063'.
[  716.263055][  T774] netlink: 56 bytes leftover after parsing attributes in process `syz.5.10063'.
[  716.491436][  T788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10069'.
[  716.503619][  T788] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10069'.
[  716.518984][  T788] netlink: 33 bytes leftover after parsing attributes in process `syz.6.10069'.
[  716.529034][  T788] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10069'.
[  716.538588][  T788] netlink: 33 bytes leftover after parsing attributes in process `syz.6.10069'.
[  716.766761][  T798] syzkaller0: entered promiscuous mode
[  716.845492][  T807] netlink: 'syz.4.10076': attribute type 39 has an invalid length.
[  718.632736][  T875] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10103'.
[  718.645169][  T875] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10103'.
[  718.915867][  T893] syzkaller0: entered promiscuous mode
[  718.927869][  T893] syzkaller0: entered allmulticast mode
[  719.497099][  T924] netlink: 'syz.6.10124': attribute type 39 has an invalid length.
[  719.520874][  T925] syzkaller0: entered promiscuous mode
[  719.531188][  T925] syzkaller0: entered allmulticast mode
[  720.773017][  T987] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=987 comm=syz.1.10149
[  721.335031][ T1016] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1016 comm=syz.4.10162
[  721.466652][   T28] audit: type=1400 audit(2000000504.240:1197): avc:  denied  { create } for  pid=1022 comm="syz.4.10165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  721.514799][ T1025] netlink: 'syz.5.10166': attribute type 39 has an invalid length.
[  721.790154][ T1038] netlink: 1010 bytes leftover after parsing attributes in process `syz.5.10173'.
[  721.815677][ T1038] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  721.960742][ T1049] netlink: 'syz.4.10177': attribute type 39 has an invalid length.
[  722.362338][ T1095] bridge_slave_0: mtu less than device minimum
[  722.370102][ T1096] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10195'.
[  722.379500][ T1096] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10195'.
[  723.130082][ T1100] netlink: 'syz.5.10197': attribute type 39 has an invalid length.
[  723.413756][   T28] audit: type=1400 audit(2000000506.065:1198): avc:  denied  { create } for  pid=1130 comm="syz.4.10210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  723.991962][ T1146] netlink: 'syz.5.10214': attribute type 39 has an invalid length.
[  724.331616][ T1168] netlink: 'syz.6.10225': attribute type 39 has an invalid length.
[  725.380433][ T1218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10243'.
[  725.433831][ T1218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10243'.
[  725.459452][ T1218] netlink: 33 bytes leftover after parsing attributes in process `syz.3.10243'.
[  725.484038][ T1218] veth1_to_bridge: entered allmulticast mode
[  725.511673][ T1218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10243'.
[  725.521683][ T1218] netlink: 33 bytes leftover after parsing attributes in process `syz.3.10243'.
[  725.655412][ T1242] netlink: 'syz.1.10253': attribute type 21 has an invalid length.
[  725.732193][ T1247] loop1: detected capacity change from 0 to 512
[  725.746890][ T1247] EXT4-fs: Ignoring removed nomblk_io_submit option
[  725.768633][ T1249] loop4: detected capacity change from 0 to 512
[  725.786590][ T1249] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  725.802291][ T1249] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.10257: bad orphan inode 4
[  725.816392][ T1249] loop4: lost filesystem error report for type 5 error -117
[  725.826461][ T1247] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  725.847055][ T1249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  725.879543][ T1258] loop3: detected capacity change from 0 to 512
[  725.897114][ T1258] EXT4-fs: Ignoring removed bh option
[  725.916231][   T28] audit: type=1400 audit(2000000508.405:1199): avc:  denied  { write } for  pid=1248 comm="syz.4.10257" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  725.945551][ T1247] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  725.979916][ T1258] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.10258: corrupted in-inode xattr: bad e_name length
[  726.012909][   T28] audit: type=1400 audit(2000000508.451:1200): avc:  denied  { write } for  pid=1246 comm="syz.1.10256" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  726.056557][ T1258] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  726.056795][ T1258] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.10258: couldn't read orphan inode 15 (err -117)
[  726.066206][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  726.066232][    C0] EXT4-fs (loop3): initial error at time 2000000508: ext4_iget_extra_inode:5128: inode 15
[  726.066263][    C0] EXT4-fs (loop3): last error at time 2000000508: ext4_iget_extra_inode:5128: inode 15
[  726.156488][ T1258] loop3: lost filesystem error report for type 5 error -117
[  726.157460][ T1258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  727.631005][T27041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  727.644413][T27355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  727.682079][T30979] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  727.717902][ T1272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10263'.
[  728.787363][ T1272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10263'.
[  728.796424][ T1272] netlink: 33 bytes leftover after parsing attributes in process `syz.3.10263'.
[  728.805775][ T1272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10263'.
[  728.814949][ T1272] netlink: 33 bytes leftover after parsing attributes in process `syz.3.10263'.
[  730.855150][ T1316] netlink: 'syz.4.10275': attribute type 10 has an invalid length.
[  730.879764][ T1316] netlink: 55 bytes leftover after parsing attributes in process `syz.4.10275'.
[  731.183941][ T1320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10277'.
[  731.563980][ T1320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10277'.
[  731.581148][ T1320] netlink: 33 bytes leftover after parsing attributes in process `syz.3.10277'.
[  731.599445][ T1320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10277'.
[  731.796902][ T1340] loop1: detected capacity change from 0 to 1024
[  731.822108][ T1340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  731.957884][   T28] audit: type=1400 audit(2000000514.066:1201): avc:  denied  { write } for  pid=1339 comm="syz.1.10287" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  732.018245][ T1340] EXT4-fs (loop1): shut down requested (2)
[  732.192857][T30979] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  732.737191][ T1370] netlink: 'syz.4.10299': attribute type 10 has an invalid length.
[  732.749391][ T1372] bridge0: entered allmulticast mode
[  732.912139][   T28] audit: type=1400 audit(2000000514.955:1202): avc:  denied  { append } for  pid=1373 comm="syz.6.10300" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  732.968351][ T1378] loop4: detected capacity change from 0 to 512
[  732.975845][ T1378] EXT4-fs: Ignoring removed mblk_io_submit option
[  733.015009][ T1378] EXT4-fs: test_dummy_encryption option not supported
[  733.084250][ T1384] __nla_validate_parse: 8 callbacks suppressed
[  733.084290][ T1384] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10304'.
[  733.160705][ T1387] loop4: detected capacity change from 0 to 512
[  733.199673][ T1387] EXT4-fs (loop4): 1 truncate cleaned up
[  733.229388][ T1387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  733.287009][ T1395] loop3: detected capacity change from 0 to 512
[  733.298507][ T1397] netlink: 'syz.1.10307': attribute type 39 has an invalid length.
[  733.316565][ T1387] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.10306: bg 0: block 465: padding at end of block bitmap is not set
[  733.331135][   T28] audit: type=1400 audit(2000000515.330:1203): avc:  denied  { write } for  pid=1386 comm="syz.4.10306" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  733.389198][ T1395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  733.418745][ T1387] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  733.440709][ T1394] loop6: detected capacity change from 0 to 8192
[  733.447340][ T1395] ext4 filesystem being mounted at /289/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  733.486453][ T1394] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  733.500340][ T1387] EXT4-fs (loop4): This should not happen!! Data will be lost
[  733.500340][ T1387] 
[  733.675897][ T1394] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  733.700780][ T1402] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 63 with error 28
[  733.718369][ T1394] FAT-fs (loop6): Filesystem has been set read-only
[  734.246875][ T1394] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  734.256939][ T1394] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  734.265953][ T1402] EXT4-fs (loop4): This should not happen!! Data will be lost
[  734.265953][ T1402] 
[  734.276395][ T1394] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  734.285404][ T1402] EXT4-fs (loop4): Total free blocks count 0
[  734.291647][ T1394] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  734.300883][ T1402] EXT4-fs (loop4): Free/Dirty block details
[  734.307073][ T1394] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  734.316050][ T1402] EXT4-fs (loop4): free_blocks=0
[  734.321213][ T1402] EXT4-fs (loop4): dirty_blocks=63
[  734.326392][ T1394] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  734.335311][ T1402] EXT4-fs (loop4): Block reservation details
[  734.341785][ T1402] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 1400308550 > max in inode 15
[  734.352181][ T1394] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  734.363713][ T1394] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  734.374746][ T1394] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  734.561936][T27041] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  734.589661][ T1413] loop5: detected capacity change from 0 to 512
[  734.597701][T27355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  734.607153][ T1413] ext4: Unknown parameter 'func'
[  734.995470][ T1438] netlink: 'syz.6.10320': attribute type 39 has an invalid length.
[  735.156615][ T1442] loop3: detected capacity change from 0 to 256
[  735.314395][ T1442] FAT-fs (loop3): codepage cp852 not found
[  735.562498][ T1447] loop3: detected capacity change from 0 to 128
[  735.570265][ T1447] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  735.582882][ T1447] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  735.726745][   T28] audit: type=1400 audit(2000000517.585:1204): avc:  denied  { bind } for  pid=1446 comm="syz.5.10323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  736.055840][ T4491] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  736.085599][ T1447] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  736.292362][ T1461] loop1: detected capacity change from 0 to 256
[  736.371194][ T1463] loop6: detected capacity change from 0 to 512
[  736.865762][ T1463] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  736.878443][ T1463] ext4 filesystem being mounted at /505/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  736.889182][ T1461] FAT-fs (loop1): codepage cp850 not found
[  736.916318][ T1471] tipc: Started in network mode
[  736.921344][ T1471] tipc: Node identity 4, cluster identity 4711
[  736.927775][ T1471] tipc: Node number set to 4
[  736.972348][ T1462] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  736.980981][ T1462] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #2: comm syz.6.10327: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  737.132404][   T28] audit: type=1400 audit(2000000518.904:1205): avc:  denied  { setopt } for  pid=1488 comm="syz.4.10337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  737.192569][T25291] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  737.209695][ T1491] netlink: 'syz.4.10338': attribute type 39 has an invalid length.
[  737.263540][ T1497] loop1: detected capacity change from 0 to 512
[  737.270652][ T1497] ext4: Unknown parameter 'func'
[  737.385421][ T1501] loop5: detected capacity change from 0 to 512
[  737.396486][ T1501] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  737.433922][ T1501] EXT4-fs (loop5): 1 truncate cleaned up
[  737.440656][ T1501] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  737.998507][   T28] audit: type=1400 audit(2000000519.213:1206): avc:  denied  { write } for  pid=1492 comm="syz.5.10340" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  738.295057][T32107] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  738.375061][   T28] audit: type=1400 audit(2000000520.065:1207): avc:  denied  { bind } for  pid=1519 comm="syz.4.10347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  738.424079][   T28] audit: type=1400 audit(2000000520.065:1208): avc:  denied  { listen } for  pid=1519 comm="syz.4.10347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  738.453979][   T28] audit: type=1400 audit(2000000520.093:1209): avc:  denied  { accept } for  pid=1519 comm="syz.4.10347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  739.237294][ T1562] netlink: 68 bytes leftover after parsing attributes in process `syz.6.10353'.
[  739.429449][ T1566] loop6: detected capacity change from 0 to 512
[  739.457401][ T1566] ext4: Unknown parameter 'func'
[  739.929190][ T1571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10356'.
[  740.008640][ T1571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10356'.
[  740.097533][ T1571] netlink: 33 bytes leftover after parsing attributes in process `syz.3.10356'.
[  740.123892][ T1571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10356'.
[  740.132924][ T1571] netlink: 33 bytes leftover after parsing attributes in process `syz.3.10356'.
[  740.487010][ T6228] kernel write not supported for file /891/uid_map (pid: 6228 comm: kworker/0:7)
[  740.500630][ T1597] loop6: detected capacity change from 0 to 512
[  740.535407][ T1597] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #11: block 327694: comm syz.6.10367: lblock 0 mapped to illegal pblock 327694 (length 1)
[  740.607038][ T1597] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  740.607287][ T1597] ------------[ cut here ]------------
[  740.616462][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  740.616478][    C1] EXT4-fs (loop6): initial error at time 2000000522: ext4_map_blocks:791: inode 11: block 327694
[  740.616537][    C1] EXT4-fs (loop6): last error at time 2000000522: ext4_map_blocks:791: inode 11: block 327694
[  740.649407][ T1597] EA inode 11 i_nlink=2
[  740.649442][ T1597] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.6.10367/1597
[  740.664594][ T1597] Modules linked in:
[  740.668846][ T1597] CPU: 1 UID: 0 PID: 1597 Comm: syz.6.10367 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  740.679907][ T1597] Tainted: [W]=WARN
[  740.683732][ T1597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  740.693862][ T1597] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350
[  740.700574][ T1597] Code: b4 5e 98 ff 4c 8d 2d 6d 6b 5c 05 49 8d 7e 40 e8 34 1c b6 ff 49 8b 6e 40 4c 89 e7 e8 68 17 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 0f f3 d7 03 66 66 66 66 66 66 2e
[  740.720455][ T1597] RSP: 0018:ffffc900016c7778 EFLAGS: 00010246
[  740.726576][ T1597] RAX: ffff88814ce07100 RBX: ffff88811cad72f8 RCX: ffffffff81c0d438
[  740.734625][ T1597] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3f90
[  740.742668][ T1597] RBP: 000000000000000b R08: 000188811cad72ab R09: 0000000000000000
[  740.750727][ T1597] R10: ffffc900016c76a8 R11: 0001c900016c76a8 R12: ffff88811cad72a8
[  740.758805][ T1597] R13: ffffffff871d3f90 R14: ffff88811cad7260 R15: 0000000000000001
[  740.766877][ T1597] FS:  00007ff1ff5c76c0(0000) GS:ffff8882ae9fa000(0000) knlGS:0000000000000000
[  740.775891][ T1597] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  740.782523][ T1597] CR2: 00007ff2661556b8 CR3: 000000011b27a000 CR4: 00000000003506f0
[  740.790567][ T1597] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  740.798598][ T1597] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  740.806659][ T1597] Call Trace:
[  740.810043][ T1597]  <TASK>
[  740.813026][ T1597]  ext4_xattr_inode_dec_ref_all+0x57c/0x8b0
[  740.819016][ T1597]  ? errseq_check+0x2c/0x50
[  740.823644][ T1597]  ext4_xattr_delete_inode+0x6c1/0x7a0
[  740.829189][ T1597]  ? ext4_truncate+0x89f/0xa10
[  740.834027][ T1597]  ext4_evict_inode+0xb16/0xe30
[  740.839081][ T1597]  ? __pfx_ext4_evict_inode+0x10/0x10
[  740.844583][ T1597]  evict+0x2af/0x510
[  740.848556][ T1597]  ? __dquot_initialize+0x146/0x7c0
[  740.853881][ T1597]  iput+0x41a/0x580
[  740.854853][ T1603] netlink: 'syz.4.10369': attribute type 21 has an invalid length.
[  740.857827][ T1597]  ext4_process_orphan+0x1a9/0x1c0
[  740.870793][ T1597]  ext4_orphan_cleanup+0x69c/0x9f0
[  740.875957][ T1597]  ext4_fill_super+0x3408/0x37c0
[  740.880953][ T1597]  ? set_blocksize+0x14c/0x270
[  740.885749][ T1597]  ? setup_bdev_super+0x30e/0x370
[  740.890897][ T1597]  ? __pfx_ext4_fill_super+0x10/0x10
[  740.896220][ T1597]  get_tree_bdev_flags+0x291/0x300
[  740.901634][ T1597]  ? __pfx_ext4_fill_super+0x10/0x10
[  740.907030][ T1597]  get_tree_bdev+0x1f/0x30
[  740.911515][ T1597]  ext4_get_tree+0x1c/0x30
[  740.915991][ T1597]  vfs_get_tree+0x57/0x1d0
[  740.920467][ T1597]  do_new_mount+0x288/0x8d0
[  740.925102][ T1597]  path_mount+0x4d0/0xbc0
[  740.929519][ T1597]  __se_sys_mount+0x28c/0x2e0
[  740.934459][ T1597]  __x64_sys_mount+0x67/0x80
[  740.939317][ T1597]  x64_sys_call+0x2d61/0x3020
[  740.944118][ T1597]  do_syscall_64+0x12c/0x3b0
[  740.948881][ T1597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.954847][ T1597] RIP: 0033:0x7ff200b6e0ca
[  740.959304][ T1597] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  740.979086][ T1597] RSP: 002b:00007ff1ff5c6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  740.987594][ T1597] RAX: ffffffffffffffda RBX: 00007ff1ff5c6ee0 RCX: 00007ff200b6e0ca
[  740.995677][ T1597] RDX: 0000200000000080 RSI: 00002000000001c0 RDI: 00007ff1ff5c6ea0
[  741.003921][ T1597] RBP: 0000200000000080 R08: 00007ff1ff5c6ee0 R09: 0000000000800718
[  741.012186][ T1597] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0
[  741.020243][ T1597] R13: 00007ff1ff5c6ea0 R14: 000000000000048a R15: 0000200000000740
[  741.028327][ T1597]  </TASK>
[  741.031368][ T1597] ---[ end trace 0000000000000000 ]---
[  741.039088][ T1597] EXT4-fs (loop6): 1 orphan inode deleted
[  741.045429][ T1597] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  741.359844][T25291] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  741.454847][ T1628] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10381'.
[  741.723570][ T1636] loop6: detected capacity change from 0 to 512
[  741.731080][ T1636] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  741.740147][ T1636] EXT4-fs (loop6): invalid journal inode
[  741.745955][ T1636] EXT4-fs (loop6): can't get journal size
[  741.753283][ T1636] EXT4-fs (loop6): 1 truncate cleaned up
[  741.759800][ T1636] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  741.778472][   T28] audit: type=1400 audit(2000000523.256:1210): avc:  denied  { write } for  pid=1635 comm="syz.6.10380" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  741.801193][ T1636] EXT4-fs warning (device loop6): ext4_group_extend:1861: can't shrink FS - resize aborted
[  741.823748][T25291] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  742.094438][   T28] audit: type=1400 audit(2000000523.546:1211): avc:  denied  { getopt } for  pid=1656 comm="syz.1.10392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  742.210611][ T1663] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10394'.
[  743.094126][ T1694] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10406'.
[  743.258799][ T1708] loop6: detected capacity change from 0 to 512
[  743.299809][ T1708] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  743.315107][ T1708] ext4 filesystem being mounted at /520/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  744.128653][   T28] audit: type=1400 audit(2000000525.455:1212): avc:  denied  { write } for  pid=1702 comm="syz.6.10410" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  744.275379][T25291] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  744.289725][   T28] audit: type=1400 audit(2000000525.474:1213): avc:  denied  { write } for  pid=1702 comm="syz.6.10410" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  744.337552][   T28] audit: type=1400 audit(2000000525.474:1214): avc:  denied  { remove_name } for  pid=1702 comm="syz.6.10410" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  744.428669][   T28] audit: type=1400 audit(2000000525.474:1215): avc:  denied  { rename } for  pid=1702 comm="syz.6.10410" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  744.451322][ T1735] loop1: detected capacity change from 0 to 512
[  744.458015][ T1735] EXT4-fs: test_dummy_encryption option not supported
[  744.656382][ T1740] loop6: detected capacity change from 0 to 1024
[  744.695428][ T1740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  745.164132][ T1740] ext4 filesystem being mounted at /522/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  745.179393][ T1740] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.10421: lblock 0 mapped to illegal pblock 0 (length 1)
[  745.193224][ T1740] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  745.206067][ T1740] EXT4-fs (loop6): This should not happen!! Data will be lost
[  745.206067][ T1740] 
[  745.229910][   T12] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 4: comm kworker/u8:0: lblock 4 mapped to illegal pblock 4 (length 2)
[  745.246794][   T12] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117
[  745.268080][   T12] EXT4-fs (loop6): This should not happen!! Data will be lost
[  745.268080][   T12] 
[  745.292147][   T12] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8)
[  745.323615][   T12] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  745.352901][   T12] EXT4-fs (loop6): This should not happen!! Data will be lost
[  745.352901][   T12] 
[  745.489402][T25291] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  745.523755][T25291] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  746.016556][ T1757] netlink: 68 bytes leftover after parsing attributes in process `syz.6.10422'.
[  746.621349][ T1782] loop5: detected capacity change from 0 to 512
[  746.654001][ T1782] ext4: Unknown parameter 'func'
[  747.757988][ T1798] netlink: 'syz.6.10440': attribute type 10 has an invalid length.
[  747.766313][ T1798] netlink: 55 bytes leftover after parsing attributes in process `syz.6.10440'.
[  748.334343][ T1808] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10444'.
[  748.355436][ T1808] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10444'.
[  748.665052][ T1817] loop5: detected capacity change from 0 to 1024
[  748.724096][ T1817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  748.748809][ T1817] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  748.762365][   T28] audit: type=1400 audit(2000000529.778:1216): avc:  denied  { write } for  pid=1810 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  748.798262][ T1817] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.10447: Freeing blocks not in datazone - block = 0, count = 16
[  748.857311][ T1816] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.10447: bg 0: block 112: padding at end of block bitmap is not set
[  748.877737][   T28] audit: type=1400 audit(2000000529.816:1217): avc:  denied  { write } for  pid=1816 comm="syz.5.10447" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  748.939160][ T1816] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  748.962793][   T28] audit: type=1400 audit(2000000529.853:1218): avc:  denied  { write } for  pid=1828 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  749.023389][ T1816] EXT4-fs (loop5): This should not happen!! Data will be lost
[  749.023389][ T1816] 
[  749.049438][ T1842] netlink: 'syz.1.10452': attribute type 39 has an invalid length.
[  749.064164][ T1816] EXT4-fs (loop5): Total free blocks count 0
[  749.084186][ T1816] EXT4-fs (loop5): Free/Dirty block details
[  749.102542][ T1816] EXT4-fs (loop5): free_blocks=0
[  749.149573][ T1816] EXT4-fs (loop5): dirty_blocks=16
[  749.167766][ T1816] EXT4-fs (loop5): Block reservation details
[  749.176139][ T1852] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.10455'.
[  749.187850][ T1816] EXT4-fs (loop5): i_reserved_data_blocks=1
[  749.244042][T32107] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  749.262073][ T1857] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10457'.
[  749.285156][T32107] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  749.374196][   T28] audit: type=1400 audit(2000000530.349:1219): avc:  denied  { mount } for  pid=1846 comm="syz.3.10454" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  749.440167][ T1871] netlink: 'syz.6.10462': attribute type 21 has an invalid length.
[  749.507710][   T28] audit: type=1400 audit(2000000530.480:1220): avc:  denied  { write } for  pid=1835 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  749.833112][   T28] audit: type=1400 audit(2000000530.770:1221): avc:  denied  { write } for  pid=1877 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  750.200650][ T1897] netlink: 'syz.3.10467': attribute type 39 has an invalid length.
[  750.398111][   T28] audit: type=1400 audit(2000000531.313:1222): avc:  denied  { write } for  pid=1882 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  750.687415][   T28] audit: type=1400 audit(2000000531.556:1223): avc:  denied  { write } for  pid=1908 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  750.996902][   T28] audit: type=1400 audit(2000000531.753:1224): avc:  denied  { nlmsg_tty_audit } for  pid=1911 comm="syz.3.10469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  751.290487][ T1932] loop5: detected capacity change from 0 to 4096
[  751.306632][   T28] audit: type=1400 audit(2000000532.165:1225): avc:  denied  { getopt } for  pid=1887 comm="syz.6.10466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  751.338018][ T1932] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  751.581749][   T28] audit: type=1400 audit(2000000532.427:1226): avc:  denied  { write } for  pid=1931 comm="syz.5.10474" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  751.668302][ T1932] EXT4-fs (loop5): shut down requested (0)
[  751.777981][   T28] audit: type=1400 audit(2000000532.473:1227): avc:  denied  { write } for  pid=1919 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  751.813680][   T28] audit: type=1400 audit(2000000532.642:1228): avc:  denied  { write } for  pid=1948 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  751.836223][T32107] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  751.908666][ T1954] netlink: 1010 bytes leftover after parsing attributes in process `syz.5.10478'.
[  751.918314][ T1954] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  752.064335][ T1974] loop5: detected capacity change from 0 to 512
[  752.109577][   T28] audit: type=1400 audit(2000000532.913:1229): avc:  denied  { write } for  pid=1950 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  752.132992][ T1974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  752.163985][ T1974] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  752.214440][T32107] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  752.293833][ T1998] netlink: 'syz.5.10488': attribute type 39 has an invalid length.
[  752.459915][ T2025] netlink: 'syz.6.10496': attribute type 21 has an invalid length.
[  752.509265][ T2023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  752.522342][ T2023] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  753.065709][ T2050] loop4: detected capacity change from 0 to 4096
[  753.074174][ T2050] EXT4-fs: test_dummy_encryption option not supported
[  753.101932][ T2050] loop4: detected capacity change from 0 to 512
[  753.136973][ T2050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  753.212059][T27041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  753.300523][ T2078] netlink: 'syz.1.10503': attribute type 39 has an invalid length.
[  753.568068][ T2104] loop6: detected capacity change from 0 to 512
[  753.580776][ T2104] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  753.610244][ T2104] EXT4-fs (loop6): 1 truncate cleaned up
[  753.616908][ T2104] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  753.656604][ T2108] loop1: detected capacity change from 0 to 512
[  753.688996][ T2108] EXT4-fs: Ignoring removed nomblk_io_submit option
[  753.725712][ T2108] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  753.874202][ T2108] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  753.919758][T30979] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  754.208844][T25291] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  754.444645][ T2125] netlink: 'syz.1.10518': attribute type 39 has an invalid length.
[  754.653599][ T2149] SELinux: failed to load policy
[  754.763487][ T2154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  754.773208][ T2154] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  754.795560][ T2146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  754.813293][ T2146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  754.825520][ T2152] loop5: detected capacity change from 0 to 8192
[  754.872463][ T2152] syz.5.10530: attempt to access beyond end of device
[  754.872463][ T2152] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  754.911540][ T2152] Buffer I/O error on dev loop5, logical block 57847, async page read
[  754.921588][ T2152] syz.5.10530: attempt to access beyond end of device
[  754.921588][ T2152] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  754.927605][ T2161] netlink: 'syz.6.10534': attribute type 39 has an invalid length.
[  754.949472][ T2152] Buffer I/O error on dev loop5, logical block 57847, async page read
[  754.975128][ T2152] syz.5.10530: attempt to access beyond end of device
[  754.975128][ T2152] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  754.998729][ T2152] Buffer I/O error on dev loop5, logical block 57847, async page read
[  755.007331][ T2167] loop1: detected capacity change from 0 to 1024
[  755.014622][ T2164] syz.5.10530: attempt to access beyond end of device
[  755.014622][ T2164] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  755.042124][ T2152] syz.5.10530: attempt to access beyond end of device
[  755.042124][ T2152] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  755.057890][ T2167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  755.077348][ T2164] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1)
[  755.086513][ T2164] FAT-fs (loop5): Filesystem has been set read-only
[  755.093750][ T2152] Buffer I/O error on dev loop5, logical block 57847, async page read
[  755.096756][   T28] kauditd_printk_skb: 9 callbacks suppressed
[  755.096873][   T28] audit: type=1400 audit(2000000535.711:1239): avc:  denied  { write } for  pid=2166 comm="syz.1.10536" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  755.102367][ T2152] syz.5.10530: attempt to access beyond end of device
[  755.102367][ T2152] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  755.143464][ T2152] Buffer I/O error on dev loop5, logical block 57847, async page read
[  755.151713][ T2152] syz.5.10530: attempt to access beyond end of device
[  755.151713][ T2152] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  755.165602][ T2152] Buffer I/O error on dev loop5, logical block 57847, async page read
[  755.174471][ T2152] syz.5.10530: attempt to access beyond end of device
[  755.174471][ T2152] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  755.188234][ T2152] Buffer I/O error on dev loop5, logical block 57847, async page read
[  755.196510][ T2152] syz.5.10530: attempt to access beyond end of device
[  755.196510][ T2152] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  755.210930][ T2152] Buffer I/O error on dev loop5, logical block 57847, async page read
[  755.220336][ T2152] syz.5.10530: attempt to access beyond end of device
[  755.220336][ T2152] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  755.233893][ T2152] Buffer I/O error on dev loop5, logical block 57847, async page read
[  755.237029][T30979] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  755.242253][ T2152] Buffer I/O error on dev loop5, logical block 57847, async page read
[  755.259777][ T2175] loop6: detected capacity change from 0 to 512
[  755.285758][ T2175] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  755.315474][ T2175] EXT4-fs (loop6): orphan cleanup on readonly fs
[  755.322347][ T2175] Quota error (device loop6): v2_read_file_info: Can't read info structure
[  755.331136][ T2175] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix.
[  755.345668][ T2175] EXT4-fs (loop6): Cannot turn on quotas: error -5
[  755.357794][ T2175] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.10538: bg 0: block 64: padding at end of block bitmap is not set
[  755.372213][ T2175] loop6: lost filesystem error report for type 5 error -117
[  755.375689][ T2175] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  755.383141][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  755.383162][    C1] EXT4-fs (loop6): initial error at time 2000000535: ext4_validate_block_bitmap:441
[  755.383182][    C1] EXT4-fs (loop6): last error at time 2000000535: ext4_validate_block_bitmap:441
[  755.417749][ T2175] loop6: lost filesystem error report for type 5 error -117
[  755.419497][ T2175] EXT4-fs (loop6): 1 truncate cleaned up
[  755.433182][ T2175] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  755.553499][T25291] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  755.583480][T25291] ==================================================================
[  755.591666][T25291] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru
[  755.599266][T25291] 
[  755.601617][T25291] read-write to 0xffff888237d266e8 of 1 bytes by task 2180 on cpu 1:
[  755.609706][T25291]  folio_add_lru+0xaa/0x1f0
[  755.614243][T25291]  filemap_add_folio+0x267/0x350
[  755.619227][T25291]  filemap_get_pages+0x7ae/0x1250
[  755.624315][T25291]  filemap_splice_read+0x3c6/0x780
[  755.629467][T25291]  splice_direct_to_actor+0x26e/0x670
[  755.634893][T25291]  do_splice_direct+0x119/0x1a0
[  755.639794][T25291]  do_sendfile+0x382/0x650
[  755.644236][T25291]  __x64_sys_sendfile64+0x105/0x150
[  755.649470][T25291]  x64_sys_call+0x2dc4/0x3020
[  755.654194][T25291]  do_syscall_64+0x12c/0x3b0
[  755.658826][T25291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  755.664752][T25291] 
[  755.667099][T25291] read to 0xffff888237d266e8 of 1 bytes by task 25291 on cpu 0:
[  755.674754][T25291]  __lru_add_drain_all+0x17e/0x450
[  755.679928][T25291]  lru_add_drain_all+0x10/0x20
[  755.684749][T25291]  invalidate_bdev+0x47/0x70
[  755.689376][T25291]  ext4_put_super+0x610/0x7b0
[  755.694092][T25291]  generic_shutdown_super+0xee/0x220
[  755.699411][T25291]  kill_block_super+0x2a/0x70
[  755.704132][T25291]  ext4_kill_sb+0x42/0x80
[  755.708541][T25291]  deactivate_locked_super+0x75/0x1c0
[  755.713962][T25291]  deactivate_super+0x97/0xa0
[  755.718679][T25291]  cleanup_mnt+0x2bb/0x330
[  755.723126][T25291]  __cleanup_mnt+0x19/0x20
[  755.727575][T25291]  task_work_run+0x130/0x1a0
[  755.732205][T25291]  exit_to_user_mode_loop+0x211/0x820
[  755.737607][T25291]  do_syscall_64+0x232/0x3b0
[  755.742242][T25291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  755.748174][T25291] 
[  755.750525][T25291] value changed: 0x05 -> 0x06
[  755.755223][T25291] 
[  755.757565][T25291] Reported by Kernel Concurrency Sanitizer on:
[  755.763747][T25291] CPU: 0 UID: 0 PID: 25291 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  755.774995][T25291] Tainted: [W]=WARN
[  755.778820][T25291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  755.788909][T25291] ==================================================================
[  755.917073][ T2188] loop1: detected capacity change from 0 to 256
[  756.178033][ T2194] netlink: 'syz.6.10543': attribute type 10 has an invalid length.
[  756.276781][   T28] audit: type=1326 audit(2000000536.816:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2185 comm="syz.1.10542" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ea1aece59 code=0x0