last executing test programs: 1.966100821s ago: executing program 0 (id=1): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r2, 0x0, 0x0, 0x200) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$int_out(r1, 0x5460, &(0x7f0000000000)) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0xfffc, 0x100, 0xee}, 'syz0\x00', 0x4b}) ioctl$UI_DEV_CREATE(r3, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) 1.877474884s ago: executing program 0 (id=6): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vlan1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x3f, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800453800010000000000408a074d9e2742bdab705eee00001e0001ac1414aa0b009078070000000000000000000000dd2d0ae0000001040086dd0000ffff00000ad61de8832526ac00000000000000005f60aa4d6cd45d210d7c69d8042468d60d30a07bf5efe35ddba00f"], 0x0) (async) r2 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) timer_create(0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r6 = getpid() (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, 0x0, 0x0) (async) r9 = socket(0x11, 0xa, 0xfffffffa) setsockopt$MRT6_DEL_MFC(r9, 0x29, 0xcd, &(0x7f0000000380)={{0xa, 0x4e23, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, {0xa, 0x4e21, 0x7, @private2, 0x4}, 0x0, {[0x716ec4b5, 0x40, 0x6, 0x1, 0x3c, 0x7, 0x5, 0x6]}}, 0x5c) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async) sendmsg$AUDIT_SET(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x3e9, 0x8, 0x70bd27, 0x25dfdbfc, {0x3, 0x1, 0x0, r6, 0x80000000, 0x6, 0x5880, 0xb3, 0x0, 0x800}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) recvmmsg(r7, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtclass={0x10dc, 0x28, 0x2, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {0x7, 0x6}, {0xb, 0xf}}, [@tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x7, 0x5}}, @TCA_RATE={0x6, 0x5, {0x3, 0x1d}}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_htb={{0x8}, {0x1070, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CEIL64={0xc, 0x7, 0xc82}, @TCA_HTB_RTAB={0x404, 0x4, [0x1, 0xfadd, 0x8, 0xfffffffd, 0xfff, 0xf1, 0x0, 0x1, 0x4, 0x5, 0x2, 0xf, 0x8001, 0x6, 0xffff8000, 0x8, 0x2, 0x3, 0xcf, 0x1, 0x8, 0x10000000, 0x7, 0x1ff, 0x0, 0xfffffff7, 0x3, 0x4, 0x7, 0xf08e, 0x8, 0x1ff, 0x1, 0x5, 0x86d, 0xf1, 0x1000000, 0x4, 0x1, 0x1000, 0x6, 0x9, 0x4, 0xf79e, 0x33a, 0x2b, 0x7f, 0x6, 0x10, 0x7, 0x2, 0x1000, 0x1d, 0x80, 0x2, 0xfffffff8, 0xffffffff, 0x6, 0x1, 0x7, 0x3, 0x3, 0xa, 0x2591, 0x1, 0x10, 0x8045, 0x80000001, 0x2008e, 0x5, 0x2, 0x4, 0x8, 0x1, 0x6, 0xffff, 0xd5, 0x7fff, 0x80, 0x4, 0x4, 0xe56f, 0x5, 0xb16a, 0x101, 0x9, 0x2, 0x6, 0x101, 0x3, 0x10000000, 0x2, 0x4, 0x400, 0x2, 0x8, 0xfffffffa, 0x0, 0x6, 0x1, 0x400, 0x0, 0x80000000, 0x2, 0x5, 0xfffffff8, 0x4, 0x5, 0x9, 0x1, 0x2, 0x3, 0xb36d, 0x1, 0xb7, 0xffffff92, 0x3, 0x62f, 0x2, 0x4, 0xfffffff9, 0xa05, 0x7, 0xf, 0x6, 0x400, 0x5, 0x800, 0x1, 0x6, 0xffff, 0x2, 0x8, 0x7f, 0xfffffff9, 0x200, 0x0, 0x8, 0x56, 0x400, 0xf9fb, 0x100, 0x1, 0x1, 0x3, 0x5, 0x4, 0x6, 0x2, 0x9d, 0xda, 0xfffff986, 0x6, 0xe, 0x8, 0x9, 0x5, 0xe8, 0xff, 0x8, 0x7, 0x24, 0x5, 0x7, 0x5, 0x9, 0x3962b5df, 0x9c, 0x7ff, 0x2, 0x8, 0xa, 0xc, 0x7, 0x3, 0x89c, 0x6, 0xbe5c, 0x4, 0x5e51, 0x2, 0x7f, 0x4, 0x0, 0xff6, 0x8, 0x1, 0x7, 0x1, 0x5, 0x8, 0x9, 0x9, 0x0, 0x10001, 0x40000, 0x10001, 0x6, 0xffffff81, 0x0, 0x7ff, 0xa, 0x4, 0x4, 0x973, 0x2, 0xe, 0x81, 0x7fffffff, 0x5, 0x6, 0xe4, 0x10000, 0xffffffff, 0x2, 0x100, 0x0, 0x1, 0x8, 0x6, 0x4, 0x5, 0x0, 0x6, 0x2, 0x0, 0x516b, 0xb, 0xb, 0x8f1, 0x7, 0x2, 0x5, 0xc, 0x30000, 0x1, 0x2, 0x310, 0x3, 0x2, 0x8, 0xd, 0x7, 0x7, 0x3ff, 0x0, 0x5, 0x1, 0x14bd, 0x9, 0xc23, 0x2d, 0x2, 0x1bef69bb, 0x5, 0x9]}, @TCA_HTB_CTAB={0x404, 0x3, [0x9f, 0x6, 0x2, 0x3, 0x2, 0x2, 0x10000, 0x80000000, 0x2, 0xffff, 0x7, 0xe4c, 0x1000, 0x800, 0x6, 0xffff, 0x8, 0x5, 0x4, 0x0, 0x8001, 0x3, 0x1, 0x685, 0x7, 0x6, 0xff, 0x7, 0x2, 0x8, 0x6, 0x2, 0xffff, 0xffffffff, 0x83c, 0x2, 0x9, 0x10001, 0x3, 0x6, 0x2, 0x7, 0x8, 0x1, 0x9, 0x5, 0xffffff55, 0x2, 0x1000, 0x4, 0x7fff, 0x2, 0x20, 0xa, 0x2, 0x3ff, 0xfffffff8, 0xfa, 0x1, 0x9, 0x6, 0xe3, 0x1, 0xf4f5, 0xb, 0x7ff, 0xffffff00, 0x7, 0x80000001, 0x9, 0x5, 0x6, 0x6, 0x80000001, 0x9, 0x6, 0x200, 0x2, 0x882, 0xffff0196, 0x1ea, 0x8, 0x7f, 0x0, 0x2, 0x1ac, 0x8, 0x300000, 0x6, 0x0, 0x81, 0x0, 0x5, 0x3, 0xe23c, 0x40, 0x8, 0x9, 0x5a, 0x4, 0x6, 0x7, 0x4, 0xcf8, 0x0, 0x5, 0xfffffffd, 0x9, 0x4, 0xb, 0x9, 0x10001, 0x64, 0x1, 0x10000009, 0x0, 0x3, 0x36b, 0x1, 0xfffffff9, 0x40, 0xa, 0x800, 0x9, 0x3, 0x9, 0x10, 0x800, 0x14c1, 0x5, 0x8, 0x8, 0x400, 0x8, 0x1bc3, 0x0, 0x5, 0x1ff, 0x9, 0x3, 0x5, 0x800, 0x6, 0x80000000, 0x1, 0x8, 0x5, 0x3, 0x8e46, 0x2, 0x80000001, 0x7, 0x2, 0x7f, 0x9, 0xfffffff8, 0x3, 0xc4, 0x0, 0xe, 0xc, 0x7, 0x8, 0x9, 0x3c2, 0x7, 0x2c, 0xb23, 0x3, 0x9, 0x200, 0x0, 0xfffffff9, 0xb5, 0x454, 0x357, 0x1, 0x0, 0x1, 0x2, 0x6000, 0x6, 0x2, 0x7fffffff, 0xd6, 0x6, 0x9, 0x3, 0x0, 0x9, 0x20008468, 0x10, 0xaf, 0x9, 0x1, 0x7, 0x8, 0x1, 0x4, 0x6, 0x61fb906f, 0x8001, 0x5, 0x6, 0x0, 0x6, 0x3, 0x54cf, 0x8, 0x400, 0x80000000, 0x8, 0x3bea, 0x8, 0x200, 0x7, 0x1, 0x8, 0x5, 0x7ff, 0x2, 0x81, 0x3, 0x100, 0x7, 0x7ff, 0x6, 0x7f, 0x1, 0x3, 0x6, 0x1, 0x10001, 0xd, 0xfffffff7, 0x5, 0x3, 0x800, 0x6, 0x5, 0x0, 0x8, 0x9, 0xe00000, 0x2, 0xc, 0x9, 0x8000, 0x3, 0x1, 0x3, 0x7, 0x4, 0x7, 0x50e, 0x1ff]}, @TCA_HTB_RATE64={0xc, 0x6, 0x2857}, @TCA_HTB_PARMS={0x30, 0x1, {{0x5, 0x2, 0x2, 0x4, 0xc, 0x1ff}, {0xb, 0x1, 0x6, 0x4, 0x8, 0x8}, 0x7, 0x0, 0x9, 0x3, 0x4}}, @TCA_HTB_CEIL64={0xc, 0x7, 0x8}, @TCA_HTB_RTAB={0x404, 0x4, [0x499, 0x9, 0x3ff, 0x3, 0xf, 0x3, 0xff, 0x80000000, 0x6, 0xb, 0x6, 0xc87, 0x7e25e587, 0x8, 0xc, 0xffffffff, 0x1, 0x0, 0x7d6, 0x4, 0x8, 0xfffffff7, 0x8aaa, 0x7, 0x1, 0x9, 0x7, 0x3cd, 0x2, 0x7f, 0xb, 0x800, 0x1, 0x9, 0x9, 0x92, 0x3, 0x1, 0x2, 0x8, 0x2, 0xc, 0x3, 0x3f, 0x8, 0x631, 0x6, 0x7, 0x3, 0xbf800000, 0xf, 0x9, 0x29f, 0xffff7fff, 0x2d, 0x2, 0x6, 0x3, 0x8, 0xff800000, 0x80000, 0x4, 0xd6, 0xbbe, 0x80000001, 0x1, 0x4, 0x0, 0x9, 0xf, 0x100, 0x3ff, 0x6a, 0x7, 0xfffffff7, 0x0, 0xc08, 0x9, 0xf, 0x7, 0x6, 0x0, 0xf82d, 0x5, 0x9, 0x7, 0x7, 0x8, 0x3, 0x5, 0x2, 0x10, 0x0, 0xff, 0x80000001, 0x8, 0x7f, 0x1, 0x1, 0x7, 0x9, 0x4, 0x2, 0x4, 0x8be, 0x4, 0x4, 0x1, 0x2, 0xfea5, 0x505e, 0x401, 0x2, 0x6, 0x6, 0x1000, 0xb154, 0x8, 0xeb, 0x80000000, 0x6, 0x1, 0x2, 0xa2, 0x800, 0x3ff, 0x1, 0x7ff, 0xfffffffb, 0xfffff7dc, 0xf, 0x0, 0xb, 0x6, 0x101, 0xafa, 0x7, 0xaa, 0x9c2c, 0xc, 0xc, 0x5, 0x7, 0x6, 0x2, 0xd98, 0x9, 0x80000000, 0x1, 0x7c00000, 0x5, 0x5, 0x80000001, 0x3, 0xb47e, 0x5, 0x2, 0x9, 0x4, 0x18, 0xdf7, 0x5, 0x8, 0x7, 0x7, 0x1, 0x7, 0xaa6, 0x3, 0x7f, 0x6, 0x2, 0x7, 0x9, 0x1, 0xfc, 0x81, 0xb41, 0x7, 0x6, 0x6, 0xfffffff7, 0x1, 0xca, 0x5, 0x7, 0x0, 0x400, 0x3, 0x0, 0xfff, 0x2dd9, 0x3, 0x3, 0x1, 0x3, 0x5aa, 0x1, 0x40, 0x382a, 0x10000, 0xa, 0x0, 0x5, 0x6, 0x80, 0x3, 0xfffffff5, 0x2, 0x80000000, 0x2, 0x6, 0xf11f, 0x0, 0x3, 0x1d800983, 0xd89d, 0xfffffffe, 0x6, 0x9, 0x21, 0x80000001, 0x5, 0x9, 0x6, 0x8, 0x7f, 0x0, 0x2, 0x0, 0x0, 0xffffff00, 0x2, 0x401, 0x8, 0xfffff801, 0x7, 0xd404, 0x6, 0x8, 0xd, 0x4, 0x8542a5f, 0x0, 0x101, 0x8, 0x413, 0x9, 0x7, 0xffff, 0x6, 0x7, 0xfffff000, 0x9, 0x7f, 0x4]}, @TCA_HTB_CTAB={0x404, 0x3, [0x5, 0xeb80122, 0xffff5b58, 0x9, 0x80000000, 0x4, 0x3, 0x572e, 0xaf, 0x9, 0xff, 0x0, 0x5, 0x6, 0xfffffff7, 0xffffffff, 0xffff, 0x7, 0x1, 0x3, 0x4, 0x6, 0x401, 0x4, 0x0, 0xea19, 0x7, 0x1, 0x2, 0x7, 0x9, 0x8, 0x80000000, 0x9, 0xf, 0x10, 0x3, 0x400, 0x5, 0x9, 0x101, 0x153c, 0x9, 0x388, 0xd, 0x6, 0x80000000, 0x10001, 0x42a, 0x1, 0x7fffffff, 0x6, 0x9, 0xa, 0x2, 0x5, 0xf4, 0x701, 0x81, 0x1000, 0xbe39, 0x2, 0x0, 0x80000001, 0x7, 0x5, 0x8, 0xa, 0xfffffffe, 0xb, 0xfffff4f0, 0x8001, 0x400, 0x5, 0x9, 0x1, 0x400000, 0xc52, 0x8000, 0xefffffc1, 0x4, 0xfffffffb, 0x5, 0x400, 0x6068, 0xb, 0x7, 0x6, 0x4, 0x2, 0x401, 0x3, 0x6, 0x4, 0xf, 0x8, 0x7, 0x8, 0x3, 0x1, 0x1ff, 0x6, 0x0, 0x0, 0x0, 0x2, 0x6, 0x2, 0xfffffffd, 0x7fff, 0xf0, 0x40, 0x4a, 0x8001, 0xffff, 0x4, 0x3, 0x1, 0x6, 0x30000, 0xfc, 0xb, 0xb, 0x9, 0x80, 0x9, 0x9, 0x7, 0x3, 0xffffffff, 0x2d3, 0x4, 0xcd, 0x7, 0x6, 0x2, 0x7fff, 0x5, 0x2, 0x2, 0x400, 0x7fff, 0x7f, 0xd, 0x3, 0x8001, 0xfffffffe, 0x5, 0x2cd4, 0xfffffffc, 0x5, 0xd5, 0x4, 0x1, 0xfffffff9, 0x1, 0x6ec8, 0x8, 0x7, 0x10000, 0x7fffffff, 0x0, 0x80, 0xc, 0x4, 0x4, 0x6, 0x4c, 0x3ff, 0x9, 0x0, 0x800, 0x8, 0xe, 0x3, 0x60000, 0x0, 0x8, 0x1, 0xf59b, 0x8, 0x100, 0x5, 0x8, 0x0, 0x8000, 0x800, 0x0, 0x5, 0x3, 0x4, 0x5, 0x4, 0x3, 0xc9f, 0x2, 0xa, 0x7, 0x4, 0x4, 0x7, 0x9, 0x1, 0x5, 0x4, 0x0, 0x3de, 0x3ff, 0x7, 0x8001, 0x8, 0x0, 0x3, 0x8, 0x6, 0x4, 0x4, 0xfffffff3, 0x3ff, 0xe, 0x9eec, 0x5, 0xa, 0x9, 0x3e9d, 0x2, 0xc56, 0x4, 0x8, 0x34c, 0x7fff, 0x7, 0x1, 0x4, 0xd7f, 0xfffffff7, 0x9, 0xd, 0x7, 0xa00, 0x9, 0x7, 0x1, 0x3, 0xf63, 0x5, 0x9, 0x3, 0x200, 0x5, 0x4, 0x4, 0x4, 0xe7ce, 0x7ff, 0x9]}, @TCA_HTB_OFFLOAD={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xc4}}]}, 0x10dc}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[], 0x2c}}, 0x0) (async) ioctl$KVM_CAP_STEAL_TIME(r3, 0x4068aea3, &(0x7f0000000400)) (async) socket(0x10, 0x803, 0x0) 1.651493669s ago: executing program 3 (id=4): r0 = socket$packet(0x11, 0x3, 0x300) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x8) (async) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) (async) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0xfe) r2 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f00090401000001022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r2, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000000005aecd988ef8008009d6a712c97a9c1066edbd1f2bfbcdced69e80dcb90045b27505ac93625a6b31327dfa88d063c12dda8d2d70ea3c89ce89975e48e0200182c8f9e73183c995f1b61ffb1e8000000927ef7b8d0c0752eae70c1378c82d82a13a8d98f3d747176280000"]}, 0x0) (async, rerun: 32) syz_usb_control_io$uac2(r2, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) (async) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async, rerun: 32) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) (async, rerun: 32) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000bc0)}}], 0x1, 0x4000000) (async, rerun: 64) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) symlinkat(&(0x7f0000000080)='./cgroup\x00', r1, &(0x7f0000000300)='./cgroup\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000000)={0x1, 0x8000000000005, 0x5, 0x80006, 0xfffffffe, 0x7}) (async, rerun: 64) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) (async, rerun: 64) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r6, 0x0, 0x9, &(0x7f0000000c00)=""/4096, &(0x7f0000001c00)=0x1000) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 64) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) (rerun: 64) 1.562935322s ago: executing program 0 (id=7): sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=@base={0x16, 0x0, 0xb4, 0x7f}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000140)="3d0ad27f387d2279d6531efea806d28532d02e83501c850cc13e7adcda46e41923161dcf0553014e173257bc0b87937d903ffe87c1b99a25ac4a5b96837063289259261decbafdc3393f2e1588bcea0be1a096980504b1b7eea13fe759bdba785e191f", &(0x7f00000001c0)=@buf="71da147e36dfc1be48d9994ae4b7e2104f836f5549110b487f5cf837d867aebe22694aed072e60c857b041bdc1656659ffe967476a0c773ea8ab2b10de2afe5a9b95ee3e3f25e12e6942b46ad7bfe380768c977548ef9716116ae50d071525101d6ca5ceda600c873ef4d62c2d6ea57f22173956654270170ec84ac462c8a150c14bf31e42c9befc1142d8c4cede1c2127f4f037db0cef10e5599149421b7dd0eaeb2885aa9980c0f7fa1fe4789c4f0ce0e9d270970f8613f0b1125accd1ab3c4868e8a8ba047be10392f32c44aa794ba3ed1bbda9106542f8ec5ddcdaef8e32bac100ad1d0e7024cd8c640afc5b9f78", 0x2}, 0x20) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) syz_emit_ethernet(0x68, &(0x7f00000000c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0xfc4c, 0x68, 0x0, 0x0, 0x2f, 0x0, @private, @remote}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x0, 0x0, [0xb09a]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x1, {{}, 0x2, {0x0, 0xfffd}}}}}}}}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000140)={0x0, 0x6, 0x1, 0x8, 0x2, 0x0, [{0x8, 0x0, 0x5, '\x00', 0x1082}, {0x80000000000000, 0x7ffffffffffffffd, 0x4, '\x00', 0x900}]}) (async) mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x17) 1.561414822s ago: executing program 4 (id=5): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/softnet_stat\x00') preadv2(r4, &(0x7f0000000400)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1, 0x1ff, 0x29eb, 0x6) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00999e94c5c0c582c082576a15375e841b3983a8f9424344120de5b075807b5b4eccd1feada49637d510cbbf5d1654d0eee8fd75ba9dc15f904c34fb9c9fb6f8f9b4d64955e44be49fe356d0025a18e3517e20e67c61d04551a4ebb4092e742566f4de26861dac982ce6eae0f8ecaa7a6c76ee26be0d9344a975a454bb477c48ac280d0bd39c1516f9732d092dea1f09266440321ab75bfafe2c146775659185491f7e72aad8db9f3de98800e50fbc6b54b443538317bb5deff395"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x58, r7, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe47}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xfd}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x8044010) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @remote}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x0, 0xe, 0x0, &(0x7f0000000280)="db759469e36512be2770717f865d", 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000900)="ffffdd014376"}, 0x50) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x810) 1.560340172s ago: executing program 1 (id=2): r0 = geteuid() r1 = socket$netlink(0x10, 0x3, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x190, 0x111, 0x4b4, 0x190, 0x700, 0x2b8, 0x278, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [0x0, 0xffffffff], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88, 0x0, 0x0, 0x5f}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21]}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x7, 0x5, 0x21, 'syz0\x00', 'syz0\x00', {0x4}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @loopback}, [0x0, 0xff], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x24, 0xca, 'pptp\x00', {0x8001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) setns(0xffffffffffffffff, 0x8000000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1000892, &(0x7f0000000740)={[{@resuid={'resuid', 0x3d, r0}}, {@resuid}], [{@smackfsfloor}, {@fsname={'fsname', 0x3d, '\xff\xff'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@euid_lt={'euid<', r0}}, {@uid_gt={'uid>', r0}}, {@flag='lazytime'}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@subj_role={'subj_role', 0x3d, 'pptp\x00'}}]}, 0x1, 0x572, &(0x7f0000001700)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000200)={[{@i_version}, {@test_dummy_encryption_v1}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000f80)='./bus/file0\x00', 0x812448, 0x0, 0xff, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00'}) sendmsg$nl_route(r5, 0x0, 0x0) rename(&(0x7f00000001c0)='./bus/file0\x00', 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000003c0)={0x7, &(0x7f0000000100)=[{0x37, 0x8, 0x1}, {0xe, 0xd2, 0xed, 0x3}, {0x3, 0x4, 0x9, 0x9}, {0xb5, 0xa5, 0xff, 0x2}, {0x0, 0x6, 0x5, 0x9}, {0x42f0, 0x4, 0x22, 0x4}, {0xc7, 0xa, 0x91, 0x5}]}, 0x10) syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001180)='./file1\x00', 0x2a18c46, &(0x7f0000001b80)=ANY=[@ANYRES8=r0], 0x7f, 0x2c1, &(0x7f0000001880)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000640)="03cb3954ddf61e1ae84ca6f72dbd7f89d762d601bb091003546bdce8544683f70863b772eaa48f09ab23134f9394fa95466bead32b885df13cb86ae8cbab461dd92ac5249ecf19e6db55621f0cb0c41bdbf4c5b01151ec833c615b0d9783f6ae7ca043bb8f21f7cff510ebf5c7e3fb2939e5f5cc70edb38206c074161c4ec0873fad9d67d1970c8f9e2ace3e99acf134768e9eaa9c650dfdca10410a4ee100ffba5d8f319dcf003e1c4f5942c03004c000970b6232bc7cd9d6d3f740f0784c9a963698c029c268b81237468f87e3a03c83cd0fb44ab2a81ffe5317ab00"/231, 0xe7, 0x8000000) 1.559746332s ago: executing program 2 (id=3): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x3c8, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x2, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@arp={@loopback, @empty, 0x0, 0x0, 0x0, 0xd, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x28}, 0xffffff00, 0xffffffff, 0x6, 0x2d, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4b, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x2f6}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x2c, r2, 0x1, 0xffffffff, 0xffffffff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x4, 0x10d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4aa7, 0x1e}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x80) 1.550759482s ago: executing program 2 (id=8): signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = fsopen(&(0x7f00000002c0)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x400) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000280)=0x13) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e23, @private=0xa010101}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x26}) syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000002340)=ANY=[@ANYBLOB='utf8,utf8,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=koi8-r,gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1533, &(0x7f0000006800)="$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") 1.459603724s ago: executing program 0 (id=9): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x4f, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000000)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x3}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, 0x2, 0x9800, 0x0, 0x4}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000427bd7000fcdbdf0e2600000008000300", @ANYRES32=r6, @ANYBLOB="0c006600000600001700fe00f013ab8cc9f34322b5e6e82f20ccf68bb127c400"/48], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16ea8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x8, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000001000085000000630000001500020000000000bf010000000000008500000056000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r8, 0x29, 0x1, 0x0, &(0x7f0000001f80)) 208.317886ms ago: executing program 4 (id=10): syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000240)=""/211, 0xd3}], 0x2) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = dup(0xffffffffffffffff) (async) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"a2e3ad099b0d09f91b5f2f0987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f323063090810e0879b0f0a75e70a9b334d959b669a240d5b0af3988f7ef31952010afde8d178708c523c921b1b5b07070d075b0936cd3b78130daa61d8e81a3f00005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397273ce1766769f0c91c00305d3f46635eb016d5b1dda98e2d739be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc3609aa24b7d520c829d095083bba2987a67399eac430d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b2860d1b3cff57d8b6d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b34cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827955e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c58b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef8473b53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b344340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb5a68a1f0c4549820a73c8859dde0712ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcb7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ec00000000000000b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a52830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000e00f96f06817fb903729a7fb6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x942}}, 0x1006) (async) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x241, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x25) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}}) 0s ago: executing program 2 (id=11): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000000c0)={[{@nobh}, {@auto_da_alloc}, {@grpquota}]}, 0x3, 0x4cc, &(0x7f0000000c80)="$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") (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0xa, 0x4, 0x2, 0x1040, 0x1}, 0x50) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.4' (ED25519) to the list of known hosts. [ 23.365097][ T24] audit: type=1400 audit(1791055718.340:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.368335][ T271] cgroup: Unknown subsys name 'net' [ 23.387931][ T24] audit: type=1400 audit(1791055718.340:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.415333][ T24] audit: type=1400 audit(1791055718.380:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.415725][ T271] cgroup: Unknown subsys name 'devices' [ 23.583832][ T271] cgroup: Unknown subsys name 'hugetlb' [ 23.589427][ T271] cgroup: Unknown subsys name 'rlimit' [ 23.790150][ T24] audit: type=1400 audit(1791055718.760:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.813355][ T24] audit: type=1400 audit(1791055718.760:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.838246][ T24] audit: type=1400 audit(1791055718.760:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.843176][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.870189][ T24] audit: type=1400 audit(1791055718.840:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.895761][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.895917][ T24] audit: type=1400 audit(1791055718.840:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.930157][ T24] audit: type=1400 audit(1791055718.840:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.955687][ T24] audit: type=1400 audit(1791055718.840:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.526376][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.533565][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.540943][ T279] device bridge_slave_0 entered promiscuous mode [ 24.547988][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.555298][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.562737][ T279] device bridge_slave_1 entered promiscuous mode [ 24.646334][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.653416][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.660809][ T280] device bridge_slave_0 entered promiscuous mode [ 24.668657][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.675752][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.683214][ T280] device bridge_slave_1 entered promiscuous mode [ 24.742932][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.749996][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.757519][ T282] device bridge_slave_0 entered promiscuous mode [ 24.783861][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.790927][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.798700][ T282] device bridge_slave_1 entered promiscuous mode [ 24.822783][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.829860][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.837475][ T283] device bridge_slave_0 entered promiscuous mode [ 24.847012][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.854177][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.861666][ T283] device bridge_slave_1 entered promiscuous mode [ 24.907148][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.914244][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.921565][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.928630][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.936682][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.943812][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.951150][ T281] device bridge_slave_0 entered promiscuous mode [ 24.960538][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.968004][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.975490][ T281] device bridge_slave_1 entered promiscuous mode [ 25.010984][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.018051][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.025334][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.032374][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.099793][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.106925][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.114298][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.121328][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.143628][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.150899][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.158393][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.166290][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.174170][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.181295][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.188855][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.196251][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.211973][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.220204][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.227266][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.239431][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.247882][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.254943][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.270999][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.293061][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.301044][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.309511][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.316568][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.323983][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.358761][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.367128][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.375484][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.382519][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.390856][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.398943][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.410648][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.418973][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.426038][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.433887][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.442732][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.450919][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.457963][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.472664][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.480515][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.489002][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.496085][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.503572][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.511840][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.518922][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.526396][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.549035][ T279] device veth0_vlan entered promiscuous mode [ 25.555662][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.563448][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.571464][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.580253][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.589675][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.598299][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.605359][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.612952][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.621083][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.628186][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.635577][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.643614][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.653983][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.661603][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.669933][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.689842][ T279] device veth1_macvtap entered promiscuous mode [ 25.698599][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.706889][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.715405][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.723839][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.731686][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.739854][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.748107][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.755904][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.764316][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.772737][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.780714][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.789041][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.797151][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.809628][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.817997][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.829890][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.837986][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.852599][ T280] device veth0_vlan entered promiscuous mode [ 25.859396][ T281] device veth0_vlan entered promiscuous mode [ 25.866772][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.875305][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.883234][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.891417][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.899941][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.908020][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.916234][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.923674][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.942665][ T283] device veth0_vlan entered promiscuous mode [ 25.949688][ T279] request_module fs-gadgetfs succeeded, but still no fs? [ 25.956847][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.965566][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.974603][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.982740][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.990713][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.998290][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.015707][ T279] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 26.016398][ T282] device veth0_vlan entered promiscuous mode [ 26.032696][ T281] device veth1_macvtap entered promiscuous mode [ 26.039766][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.048732][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.057526][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.065106][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.065937][ T301] input: syz0 as /devices/virtual/input/input4 [ 26.079392][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.091022][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.099410][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.107712][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.119737][ T280] device veth1_macvtap entered promiscuous mode [ 26.130887][ T283] device veth1_macvtap entered promiscuous mode [ 26.137729][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.146712][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.155964][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.163692][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.171859][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.180435][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.205100][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.213516][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.221922][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.231363][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.240449][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.249296][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.258604][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.267186][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.275840][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.284747][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.293323][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.301624][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.314589][ T282] device veth1_macvtap entered promiscuous mode [ 26.330318][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.362196][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.371509][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.382819][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.391178][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.519978][ T328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 26.563437][ T328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 27.443514][ T330] sched: RT throttling activated [ 27.743103][ T333] exfat: Deprecated parameter 'utf8' [ 27.748500][ T333] exfat: Deprecated parameter 'utf8' [ 27.754088][ T333] exfat: Bad value for 'allow_utime' [ 27.882250][ T303] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.894186][ T335] EXT4-fs (loop1): Unrecognized mount option "smackfsfloor=" or missing value [ 28.024813][ C0] ================================================================== [ 28.033045][ C0] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0 [ 28.040443][ C0] Read of size 8 at addr ffff88810df2d190 by task ksoftirqd/0/12 [ 28.048168][ C0] [ 28.050516][ C0] CPU: 0 PID: 12 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 28.057810][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.067879][ C0] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 28.071193][ C0] __dump_stack+0x21/0x24 [ 28.075584][ C0] dump_stack_lvl+0x1a7/0x208 [ 28.080281][ C0] ? show_regs_print_info+0x18/0x18 [ 28.085500][ C0] ? thaw_kernel_threads+0x220/0x220 [ 28.090809][ C0] print_address_description+0x7f/0x2c0 [ 28.096379][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 28.101484][ C0] kasan_report+0x100/0x140 [ 28.106017][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 28.111064][ C0] __asan_report_load8_noabort+0x14/0x20 [ 28.111076][ C0] rcu_cblist_dequeue+0x6c/0xb0 [ 28.111117][ C0] rcu_do_batch+0x448/0xaf0 [ 28.126106][ C0] ? local_bh_enable+0x20/0x20 [ 28.130887][ C0] ? __kasan_check_write+0x14/0x20 [ 28.136029][ C0] ? rcu_report_qs_rnp+0x2bc/0x390 [ 28.141160][ C0] rcu_core+0x50a/0xca0 [ 28.145353][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 28.150592][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 28.156162][ C0] ? rcu_softirq_qs+0xd5/0x1d0 [ 28.160943][ C0] ? rcu_get_gp_kthreads_prio+0x10/0x10 [ 28.166508][ C0] rcu_core_si+0x9/0x10 [ 28.170843][ C0] __do_softirq+0x255/0x563 [ 28.175363][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 28.180699][ C0] run_ksoftirqd+0x23/0x30 [ 28.185132][ C0] smpboot_thread_fn+0x464/0x820 [ 28.190075][ C0] kthread+0x324/0x3b0 [ 28.194142][ C0] ? cpu_report_death+0x1b0/0x1b0 [ 28.199166][ C0] ? kthread_blkcg+0xd0/0xd0 [ 28.203754][ C0] ret_from_fork+0x1f/0x30 [ 28.208166][ C0] [ 28.210491][ C0] Allocated by task 338: [ 28.214731][ C0] __kasan_kmalloc+0xd4/0x100 [ 28.219414][ C0] __kmalloc+0x19f/0x330 [ 28.223655][ C0] l2tp_session_create+0x39/0xb60 [ 28.228677][ C0] pppol2tp_connect+0xbf5/0x1640 [ 28.233614][ C0] __sys_connect+0x3ce/0x450 [ 28.238200][ C0] __x64_sys_connect+0x7a/0x90 [ 28.242964][ C0] do_syscall_64+0x31/0x40 [ 28.247391][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.253279][ C0] [ 28.255606][ C0] Freed by task 7: [ 28.259331][ C0] kasan_set_track+0x4a/0x70 [ 28.263916][ C0] kasan_set_free_info+0x23/0x40 [ 28.268847][ C0] ____kasan_slab_free+0x125/0x160 [ 28.273956][ C0] __kasan_slab_free+0x11/0x20 [ 28.278722][ C0] slab_free_freelist_hook+0xc5/0x190 [ 28.284144][ C0] kfree+0xc0/0x270 [ 28.287949][ C0] l2tp_session_put+0xb2/0x1a0 [ 28.292715][ C0] l2tp_session_delete+0x3a9/0x4a0 [ 28.297827][ C0] l2tp_tunnel_del_work+0x180/0x3d0 [ 28.303022][ C0] process_one_work+0x6fd/0xbc0 [ 28.307872][ C0] worker_thread+0xa8e/0x13c0 [ 28.312556][ C0] kthread+0x324/0x3b0 [ 28.316621][ C0] ret_from_fork+0x1f/0x30 [ 28.321030][ C0] [ 28.323356][ C0] Last potentially related work creation: [ 28.329070][ C0] kasan_save_stack+0x3a/0x60 [ 28.333746][ C0] __kasan_record_aux_stack+0xd2/0x100 [ 28.339202][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 28.345005][ C0] call_rcu+0x11a/0x1090 [ 28.349251][ C0] pppol2tp_release+0x1e3/0x2b0 [ 28.354105][ C0] sock_close+0xb8/0x200 [ 28.358350][ C0] __fput+0x2dc/0x730 [ 28.362339][ C0] ____fput+0x15/0x20 [ 28.366319][ C0] task_work_run+0x127/0x190 [ 28.370911][ C0] exit_to_user_mode_loop+0xcb/0xe0 [ 28.376104][ C0] exit_to_user_mode_prepare+0x76/0xa0 [ 28.381574][ C0] syscall_exit_to_user_mode+0x1d/0x40 [ 28.387050][ C0] do_syscall_64+0x3d/0x40 [ 28.391473][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.397365][ C0] [ 28.399701][ C0] The buggy address belongs to the object at ffff88810df2d000 [ 28.399701][ C0] which belongs to the cache kmalloc-512 of size 512 [ 28.413762][ C0] The buggy address is located 400 bytes inside of [ 28.413762][ C0] 512-byte region [ffff88810df2d000, ffff88810df2d200) [ 28.427131][ C0] The buggy address belongs to the page: [ 28.432789][ C0] page:ffffea000437cb00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10df2c [ 28.443021][ C0] head:ffffea000437cb00 order:2 compound_mapcount:0 compound_pincount:0 [ 28.451348][ C0] flags: 0x4000000000010200(slab|head) [ 28.456810][ C0] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 28.465397][ C0] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 28.473973][ C0] page dumped because: kasan: bad access detected [ 28.480381][ C0] page_owner tracks the page as allocated [ 28.486116][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 93, ts 4595094157, free_ts 0 [ 28.504083][ C0] prep_new_page+0x176/0x190 [ 28.508674][ C0] get_page_from_freelist+0x225f/0x23f0 [ 28.514220][ C0] __alloc_pages_nodemask+0x29a/0x640 [ 28.519599][ C0] new_slab+0x84/0x3f0 [ 28.523667][ C0] ___slab_alloc+0x2f8/0x4c0 [ 28.528259][ C0] __slab_alloc+0x63/0xa0 [ 28.532583][ C0] __kmalloc_track_caller+0x1e4/0x310 [ 28.537949][ C0] __alloc_skb+0xdc/0x520 [ 28.542275][ C0] sock_wmalloc+0xb5/0x130 [ 28.546783][ C0] unix_stream_connect+0x2f8/0xf90 [ 28.551896][ C0] __sys_connect+0x3ce/0x450 [ 28.556488][ C0] __x64_sys_connect+0x7a/0x90 [ 28.561253][ C0] do_syscall_64+0x31/0x40 [ 28.565672][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.571563][ C0] page_owner free stack trace missing [ 28.576940][ C0] [ 28.579277][ C0] Memory state around the buggy address: [ 28.584917][ C0] ffff88810df2d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.592992][ C0] ffff88810df2d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.601151][ C0] >ffff88810df2d180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.609210][ C0] ^ [ 28.613802][ C0] ffff88810df2d200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 28.621861][ C0] ffff88810df2d280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 28.629919][ C0] ================================================================== [ 28.637974][ C0] Disabling lock debugging due to kernel taint [ 28.648606][ T24] kauditd_printk_skb: 58 callbacks suppressed [ 28.648619][ T24] audit: type=1400 audit(1791055723.630:132): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 28.712036][ T303] usb 4-1: Using ep0 maxpacket: 8 [ 28.752037][ T24] audit: type=1400 audit(1791055723.630:133): avc: denied { search } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 28.773691][ T24] audit: type=1400 audit(1791055723.630:134): avc: denied { write } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 28.796022][ T24] audit: type=1400 audit(1791055723.630:135): avc: denied { add_name } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 28.817077][ T24] audit: type=1400 audit(1791055723.630:136): avc: denied { create } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 28.838134][ T24] audit: type=1400 audit(1791055723.630:137): avc: denied { append open } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 28.861274][ T24] audit: type=1400 audit(1791055723.630:138): avc: denied { getattr } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 28.982123][ T303] usb 4-1: device descriptor read/all, error -71 [ 29.582592][ T7] device bridge_slave_1 left promiscuous mode [ 29.588719][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.596247][ T7] device bridge_slave_0 left promiscuous mode [ 29.602430][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.610296][ T7] device veth1_macvtap left promiscuous mode [ 29.616385][ T7] device veth0_vlan left promiscuous mode [ 30.672763][ T7] device bridge_slave_1 left promiscuous mode [ 30.678889][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.686383][ T7] device bridge_slave_0 left promiscuous mode [ 30.692590][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.700277][ T7] device bridge_slave_1 left promiscuous mode [ 30.706685][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.714284][ T7] device bridge_slave_0 left promiscuous mode [ 30.720422][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.728234][ T7] device bridge_slave_1 left promiscuous mode [ 30.734399][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.741727][ T7] device bridge_slave_0 left promiscuous mode [ 30.748106][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.756372][ T7] device veth1_macvtap left promiscuous mode [ 30.762469][ T7] device veth0_vlan left promiscuous mode [ 30.768297][ T7] device veth1_macvtap left promiscuous mode [ 30.774351][ T7] device veth0_vlan left promiscuous mode [ 30.780201][ T7] device veth1_macvtap left promiscuous mode [ 30.786291][ T7] device veth0_vlan left promiscuous mode