DUID 00:04:80:46:6d:cf:4f:d2:f0:e0:d6:d4:98:c6:35:1e:6d:ad forked to background, child pid 3173 [ 26.617439][ T3174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.628715][ T3174] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.121' (ECDSA) to the list of known hosts. 2022/05/05 09:38:59 fuzzer started 2022/05/05 09:39:00 dialing manager at 10.128.0.169:40127 syzkaller login: [ 48.258346][ T3593] cgroup: Unknown subsys name 'net' [ 48.404293][ T3593] cgroup: Unknown subsys name 'rlimit' 2022/05/05 09:39:00 syscalls: 1718 2022/05/05 09:39:00 code coverage: enabled 2022/05/05 09:39:00 comparison tracing: enabled 2022/05/05 09:39:00 extra coverage: enabled 2022/05/05 09:39:00 delay kcov mmap: enabled 2022/05/05 09:39:00 setuid sandbox: enabled 2022/05/05 09:39:00 namespace sandbox: enabled 2022/05/05 09:39:00 Android sandbox: /sys/fs/selinux/policy does not exist 2022/05/05 09:39:00 fault injection: enabled 2022/05/05 09:39:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2022/05/05 09:39:00 net packet injection: enabled 2022/05/05 09:39:00 net device setup: enabled 2022/05/05 09:39:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/05/05 09:39:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/05/05 09:39:00 USB emulation: enabled 2022/05/05 09:39:00 hci packet injection: enabled 2022/05/05 09:39:00 wifi device emulation: enabled 2022/05/05 09:39:00 802.15.4 emulation: enabled 2022/05/05 09:39:00 fetching corpus: 0, signal 0/2000 (executing program) 2022/05/05 09:39:00 fetching corpus: 44, signal 38942/40600 (executing program) 2022/05/05 09:39:01 fetching corpus: 89, signal 56784/57774 (executing program) 2022/05/05 09:39:01 fetching corpus: 131, signal 65898/66278 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65977/66491 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65977/66609 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65977/66727 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65977/66857 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65977/66978 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65977/67084 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65977/67220 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65977/67348 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65977/67463 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65977/67606 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65977/67716 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65977/67831 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65977/67963 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65977/68085 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65977/68193 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65977/68302 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65977/68416 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65977/68569 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65977/68693 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65977/68819 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65996/68940 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65996/69051 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65996/69223 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65996/69330 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65996/69450 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65996/69576 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65996/69710 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65996/69833 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65996/69964 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65996/70095 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 65996/70216 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 66025/70219 (executing program) 2022/05/05 09:39:01 fetching corpus: 132, signal 66025/70219 (executing program) 2022/05/05 09:39:03 starting 6 fuzzer processes 09:39:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x10001, 0x800f4d2}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:39:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000100)={'macvlan0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir}) 09:39:03 executing program 1: r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r0}, 0x31) 09:39:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "7a7925e639"}, 0x9) 09:39:03 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x0, 0x81}, 0x10) 09:39:03 executing program 4: r0 = socket(0x15, 0x80005, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x7ffffffff000, 0x0, 0x0) [ 53.011672][ T3614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.011672][ T3615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.027585][ T3614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.028547][ T3615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.042080][ T3615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.042391][ T3614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.050422][ T3615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.057223][ T3614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.063604][ T3615] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.071247][ T3614] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.078203][ T3615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.085671][ T3614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.118748][ T3614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.130610][ T3609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.144225][ T3618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.150859][ T3609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.158865][ T3618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 53.160358][ T3609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.174887][ T3609] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.179024][ T3618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.182848][ T3609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.189811][ T3618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 53.203486][ T3618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.212584][ T3621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 53.220436][ T3618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.228810][ T3618] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.236398][ T3621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.236447][ T3618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 53.252199][ T3618] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 53.263143][ T3618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 53.540856][ T3605] chnl_net:caif_netlink_parms(): no params data found [ 53.594291][ T3604] chnl_net:caif_netlink_parms(): no params data found [ 53.629187][ T3603] chnl_net:caif_netlink_parms(): no params data found [ 53.704391][ T3606] chnl_net:caif_netlink_parms(): no params data found [ 53.724093][ T3607] chnl_net:caif_netlink_parms(): no params data found [ 53.795735][ T3604] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.803416][ T3604] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.811586][ T3604] device bridge_slave_0 entered promiscuous mode [ 53.820849][ T3605] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.828329][ T3605] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.836107][ T3605] device bridge_slave_0 entered promiscuous mode [ 53.859314][ T3604] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.866401][ T3604] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.875057][ T3604] device bridge_slave_1 entered promiscuous mode [ 53.883627][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.890861][ T3605] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.899064][ T3605] device bridge_slave_1 entered promiscuous mode [ 53.987265][ T3606] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.997975][ T3606] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.005827][ T3606] device bridge_slave_0 entered promiscuous mode [ 54.013285][ T3603] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.021521][ T3603] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.029897][ T3603] device bridge_slave_0 entered promiscuous mode [ 54.039340][ T3604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.050213][ T3605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.059665][ T3607] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.066731][ T3607] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.076077][ T3607] device bridge_slave_0 entered promiscuous mode [ 54.083789][ T3606] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.090999][ T3606] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.099588][ T3606] device bridge_slave_1 entered promiscuous mode [ 54.106604][ T3603] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.113832][ T3603] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.122157][ T3603] device bridge_slave_1 entered promiscuous mode [ 54.130759][ T3604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.141731][ T3605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.162544][ T3607] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.169765][ T3607] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.177513][ T3607] device bridge_slave_1 entered promiscuous mode [ 54.240468][ T3605] team0: Port device team_slave_0 added [ 54.257219][ T3606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.268769][ T3603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.282288][ T3604] team0: Port device team_slave_0 added [ 54.290194][ T3605] team0: Port device team_slave_1 added [ 54.297594][ T3607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.308547][ T3606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.319329][ T3603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.336686][ T3604] team0: Port device team_slave_1 added [ 54.352689][ T3607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.385846][ T3603] team0: Port device team_slave_0 added [ 54.420677][ T3603] team0: Port device team_slave_1 added [ 54.426851][ T3605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.434504][ T3605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.460715][ T3605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.484051][ T3606] team0: Port device team_slave_0 added [ 54.490733][ T3604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.497681][ T3604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.523819][ T3604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.543876][ T3605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.551825][ T3605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.578808][ T3605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.593265][ T3607] team0: Port device team_slave_0 added [ 54.601478][ T3606] team0: Port device team_slave_1 added [ 54.617526][ T3604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.624594][ T3604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.650861][ T3604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.689957][ T3607] team0: Port device team_slave_1 added [ 54.716763][ T3603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.723812][ T3603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.750185][ T3603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.777286][ T3605] device hsr_slave_0 entered promiscuous mode [ 54.784164][ T3605] device hsr_slave_1 entered promiscuous mode [ 54.799689][ T3606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.806662][ T3606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.832733][ T3606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.845916][ T3604] device hsr_slave_0 entered promiscuous mode [ 54.852857][ T3604] device hsr_slave_1 entered promiscuous mode [ 54.859465][ T3604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.867210][ T3604] Cannot create hsr debugfs directory [ 54.873909][ T3603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.881024][ T3603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.907263][ T3603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.934321][ T3606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.941514][ T3606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.967503][ T3606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.994910][ T3607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.001906][ T3607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.028424][ T3607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.075751][ T3607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.082883][ T3607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.109659][ T3607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.128989][ T3606] device hsr_slave_0 entered promiscuous mode [ 55.135719][ T3606] device hsr_slave_1 entered promiscuous mode [ 55.142486][ T3606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.150861][ T141] Bluetooth: hci0: command 0x0409 tx timeout [ 55.157325][ T141] Bluetooth: hci1: command 0x0409 tx timeout [ 55.157492][ T3606] Cannot create hsr debugfs directory [ 55.169297][ T3615] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 55.235522][ T141] Bluetooth: hci3: command 0x0409 tx timeout [ 55.262282][ T3603] device hsr_slave_0 entered promiscuous mode [ 55.287191][ T3603] device hsr_slave_1 entered promiscuous mode [ 55.294465][ T3603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.302575][ T3603] Cannot create hsr debugfs directory [ 55.308166][ T141] Bluetooth: hci5: command 0x0409 tx timeout [ 55.314209][ T141] Bluetooth: hci4: command 0x0409 tx timeout [ 55.343645][ T3607] device hsr_slave_0 entered promiscuous mode [ 55.352064][ T3607] device hsr_slave_1 entered promiscuous mode [ 55.359207][ T3607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.366780][ T3607] Cannot create hsr debugfs directory [ 55.772174][ T3604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.811862][ T3604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.833906][ T3604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.856457][ T3604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.868229][ T3605] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.899285][ T3605] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.917126][ T3605] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.944059][ T3605] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.979249][ T3607] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.997110][ T3607] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.007322][ T3607] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.020254][ T3607] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.073349][ T3606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.083499][ T3606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.096827][ T3606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.106379][ T3606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.186041][ T3603] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 56.208586][ T3603] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 56.236170][ T3604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.247644][ T3603] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 56.257282][ T3603] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 56.321326][ T3604] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.332100][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.343103][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.356223][ T3606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.385814][ T3607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.394711][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.404338][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.413355][ T3646] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.420778][ T3646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.450657][ T3605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.461659][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.469626][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.478873][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.487213][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.494323][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.502426][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.511441][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.537553][ T3606] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.549086][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.558503][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.566870][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.576343][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.585030][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.594949][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.602873][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.610579][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.622796][ T3607] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.650765][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.659030][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.667331][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.678555][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.686823][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.695319][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.704350][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.713227][ T3648] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.720322][ T3648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.729179][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.748491][ T3605] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.759497][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.777555][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.787012][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.795562][ T3648] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.802675][ T3648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.810609][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.818766][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.826482][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.835933][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.844694][ T3648] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.851858][ T3648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.859875][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.868854][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.877349][ T3648] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.884556][ T3648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.892170][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.901222][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.910649][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.947231][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.955903][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.964736][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.973671][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.980926][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.989944][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.001904][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.011924][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.020925][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.028066][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.035970][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.044991][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.054090][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.063201][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.072133][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.081285][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.090198][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.099166][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.135992][ T3603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.152183][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.161023][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.170102][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.178799][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.187626][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.196833][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.205841][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.214449][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.223864][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.232939][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.238085][ T3643] Bluetooth: hci1: command 0x041b tx timeout [ 57.241910][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.247053][ T3643] Bluetooth: hci0: command 0x041b tx timeout [ 57.255662][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.270217][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.284714][ T3606] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.295667][ T3606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.318513][ T3643] Bluetooth: hci3: command 0x041b tx timeout [ 57.326625][ T3605] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.337530][ T3605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.351147][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.360607][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.369135][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.377435][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.384985][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.392840][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.401414][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.401518][ T3643] Bluetooth: hci4: command 0x041b tx timeout [ 57.410171][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.423984][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.428124][ T3643] Bluetooth: hci5: command 0x041b tx timeout [ 57.433570][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.446294][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.454900][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.462597][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.471701][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.488784][ T3603] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.497463][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.505478][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.519938][ T3604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.532240][ T3606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.555383][ T3605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.568197][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.575915][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.584627][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.595092][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.605197][ T3646] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.612380][ T3646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.620266][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.627700][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.662889][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.671165][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.691881][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.715823][ T3648] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.723023][ T3648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.748417][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.757290][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.777017][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.784697][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.798243][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.807691][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.817139][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.843417][ T3607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.874328][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.899136][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.958031][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.966586][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.981105][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.999899][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.022849][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.061204][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.078784][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.106973][ T3603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.153436][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.163013][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.195555][ T3606] device veth0_vlan entered promiscuous mode [ 58.219746][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.239313][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.261646][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.271278][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.301216][ T3606] device veth1_vlan entered promiscuous mode [ 58.318346][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.326472][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.335837][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.346648][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.355984][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.372985][ T3605] device veth0_vlan entered promiscuous mode [ 58.418376][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.426567][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.436579][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.446520][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.456124][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.472593][ T3604] device veth0_vlan entered promiscuous mode [ 58.515505][ T3606] device veth0_macvtap entered promiscuous mode [ 58.531710][ T3605] device veth1_vlan entered promiscuous mode [ 58.546967][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.555736][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.563926][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.572223][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.580773][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.590253][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.598787][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.607470][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.618419][ T3606] device veth1_macvtap entered promiscuous mode [ 58.630307][ T3607] device veth0_vlan entered promiscuous mode [ 58.642001][ T3604] device veth1_vlan entered promiscuous mode [ 58.658334][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.666208][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.675982][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.684263][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.692617][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.700840][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.709363][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.718963][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.726609][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.749467][ T3606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.763279][ T3605] device veth0_macvtap entered promiscuous mode [ 58.777521][ T3607] device veth1_vlan entered promiscuous mode [ 58.799227][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.809757][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.818800][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.827225][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.838275][ T3605] device veth1_macvtap entered promiscuous mode [ 58.863346][ T3604] device veth0_macvtap entered promiscuous mode [ 58.872069][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.881431][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.889519][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.902738][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.911549][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.920660][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.931323][ T3606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.945637][ T3605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 58.956928][ T3605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.969887][ T3605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.980169][ T3604] device veth1_macvtap entered promiscuous mode [ 58.997342][ T3606] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.006651][ T3606] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.015625][ T3606] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.024755][ T3606] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.035471][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.045382][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.055580][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.065825][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.076854][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.087198][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.113492][ T3603] device veth0_vlan entered promiscuous mode [ 59.130782][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.139989][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.149712][ T3605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 59.160273][ T3605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.175998][ T3605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.187678][ T3603] device veth1_vlan entered promiscuous mode [ 59.199337][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.207043][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.215116][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.223424][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.232657][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.241557][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.250492][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.262562][ T3607] device veth0_macvtap entered promiscuous mode [ 59.272498][ T3605] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.282410][ T3605] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.291437][ T3605] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.300820][ T3605] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.310123][ T3645] Bluetooth: hci0: command 0x040f tx timeout [ 59.316403][ T3604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 59.327084][ T3645] Bluetooth: hci1: command 0x040f tx timeout [ 59.330382][ T3604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.345018][ T3604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 59.355768][ T3604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.367265][ T3604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.392674][ T3607] device veth1_macvtap entered promiscuous mode [ 59.392824][ T14] Bluetooth: hci3: command 0x040f tx timeout [ 59.411363][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.421002][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.429573][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.438963][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.447754][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.456703][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.465214][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.478339][ T3647] Bluetooth: hci5: command 0x040f tx timeout [ 59.481234][ T3603] device veth0_macvtap entered promiscuous mode [ 59.484425][ T3647] Bluetooth: hci4: command 0x040f tx timeout [ 59.524768][ T3604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 59.536468][ T3604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.546766][ T3604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 59.557767][ T3604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.569402][ T3604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.580283][ T3604] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.589930][ T3604] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.598768][ T3604] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.607581][ T3604] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.621280][ T3603] device veth1_macvtap entered promiscuous mode [ 59.635049][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.649108][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.656944][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.666001][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.703980][ T3607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 59.720384][ T3607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.730802][ T3607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 59.742630][ T3607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.752700][ T3607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 59.766803][ T3607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.779108][ T3607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.806098][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.816227][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.830738][ T3603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 59.842803][ T3603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.853157][ T3603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 59.863673][ T3603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.875757][ T3603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 59.887758][ T3603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.897639][ T3603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 59.909763][ T3603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.921477][ T3603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.931091][ T3607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 59.943149][ T3607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.962779][ T3607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 59.973532][ T3607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.983673][ T3607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 59.998429][ T3607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.009811][ T3607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.020093][ T942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.031021][ T942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.052030][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.061135][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.070234][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.079460][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.089648][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.100487][ T3607] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.112666][ T3607] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.121898][ T3607] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.130728][ T3607] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.155641][ T3603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 60.166302][ T3603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.176428][ T3603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 60.187281][ T3603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.197660][ T3603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 60.208681][ T3603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.221099][ T3603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 60.232267][ T3603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.243497][ T3603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.263766][ T3259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.264360][ T942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.275471][ T3259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.310967][ T942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.313190][ T3603] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.327310][ T3603] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.336387][ T3603] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.348046][ T3615] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 60.352659][ T3603] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.387335][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.410813][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.439747][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.459489][ T942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.467481][ T942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.514516][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.526060][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.630310][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.638713][ T942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.653094][ T942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.660730][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.680956][ T942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.702010][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.719526][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.726886][ T942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.757266][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 09:39:12 executing program 1: r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r0}, 0x31) [ 60.825254][ T942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.833848][ T3670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.856475][ T3670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.872784][ T942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.892396][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 09:39:13 executing program 1: r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r0}, 0x31) [ 60.973517][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.004271][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.063409][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:39:13 executing program 1: r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r0}, 0x31) [ 61.109813][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 09:39:13 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x0, 0x81}, 0x10) 09:39:13 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x0, 0x81}, 0x10) 09:39:13 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000100)={'macvlan0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir}) [ 61.389699][ T6] Bluetooth: hci1: command 0x0419 tx timeout [ 61.396113][ T6] Bluetooth: hci0: command 0x0419 tx timeout [ 61.474096][ T6] Bluetooth: hci3: command 0x0419 tx timeout [ 61.558581][ T6] Bluetooth: hci4: command 0x0419 tx timeout [ 61.570193][ T6] Bluetooth: hci5: command 0x0419 tx timeout 09:39:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x10001, 0x800f4d2}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:39:13 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x0, 0x81}, 0x10) 09:39:13 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x0, 0x81}, 0x10) 09:39:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "7a7925e639"}, 0x9) 09:39:14 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x0, 0x81}, 0x10) [ 65.078217][ T3615] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 67.396982][ T3618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.405364][ T3618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.413419][ T3618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.421755][ T3618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.430298][ T3618] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.437555][ T3618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.561203][ T3732] chnl_net:caif_netlink_parms(): no params data found [ 67.602204][ T3732] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.609572][ T3732] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.617311][ T3732] device bridge_slave_0 entered promiscuous mode [ 67.625749][ T3732] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.633429][ T3732] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.641431][ T3732] device bridge_slave_1 entered promiscuous mode [ 67.666315][ T3732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.680124][ T3732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.705317][ T3732] team0: Port device team_slave_0 added [ 67.712821][ T3732] team0: Port device team_slave_1 added [ 67.733502][ T3732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.740531][ T3732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.767100][ T3732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.780677][ T3732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.787746][ T3732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.814379][ T3732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.844898][ T3732] device hsr_slave_0 entered promiscuous mode [ 67.852319][ T3732] device hsr_slave_1 entered promiscuous mode [ 67.859033][ T3732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.866588][ T3732] Cannot create hsr debugfs directory [ 67.947348][ T3732] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.959540][ T3732] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.968710][ T3732] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.977409][ T3732] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.002619][ T3732] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.009864][ T3732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.017622][ T3732] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.024773][ T3732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.074620][ T3732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.089545][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.097664][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.106688][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.116837][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 68.134460][ T3732] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.145224][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.154530][ T3690] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.161631][ T3690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.178740][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.187085][ T3690] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.194220][ T3690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.220959][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.231795][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.240221][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.250497][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.261155][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.276107][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.296322][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.303980][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.317676][ T3732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.558668][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.571595][ T3259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.584967][ T3259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.597112][ T3259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.609572][ T3259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.617627][ T3732] device veth0_vlan entered promiscuous mode [ 68.629542][ T3732] device veth1_vlan entered promiscuous mode [ 68.650293][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.658622][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.666578][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.679672][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.691496][ T3732] device veth0_macvtap entered promiscuous mode [ 68.705511][ T3732] device veth1_macvtap entered promiscuous mode [ 68.719897][ T3732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 68.730933][ T3732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.740889][ T3732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 68.751699][ T3732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.761583][ T3732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 68.772783][ T3732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.786883][ T3732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 68.797605][ T3732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.810057][ T3732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 68.820537][ T3732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.832242][ T3732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.841401][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.850001][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.858101][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.866606][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.877740][ T3732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 68.888359][ T3732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.898860][ T3732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 68.909574][ T3732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.919717][ T3732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 68.936215][ T3732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.946530][ T3732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 68.957918][ T3732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.967726][ T3732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 68.978556][ T3732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.990153][ T3732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.999172][ T3259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.007700][ T3259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.019911][ T3732] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.030088][ T3732] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.039194][ T3732] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.050610][ T3732] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.107029][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.125034][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.139955][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.141434][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.155803][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.169773][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 09:39:21 executing program 4: r0 = socket(0x15, 0x80005, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x7ffffffff000, 0x0, 0x0) 09:39:21 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000100)={'macvlan0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir}) 09:39:21 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x0, 0x81}, 0x10) 09:39:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "7a7925e639"}, 0x9) 09:39:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "7a7925e639"}, 0x9) 09:39:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x10001, 0x800f4d2}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:39:21 executing program 1: r0 = socket(0x15, 0x80005, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x7ffffffff000, 0x0, 0x0) 09:39:21 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000100)={'macvlan0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir}) 09:39:21 executing program 4: r0 = socket(0x15, 0x80005, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x7ffffffff000, 0x0, 0x0) 09:39:21 executing program 4: r0 = socket(0x15, 0x80005, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x7ffffffff000, 0x0, 0x0) 09:39:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "7a7925e639"}, 0x9) 09:39:21 executing program 1: r0 = socket(0x15, 0x80005, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x7ffffffff000, 0x0, 0x0) [ 69.468768][ T3259] Bluetooth: hci2: command 0x0409 tx timeout 09:39:21 executing program 1: r0 = socket(0x15, 0x80005, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x7ffffffff000, 0x0, 0x0) 09:39:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "7a7925e639"}, 0x9) 09:39:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "7a7925e639"}, 0x9) 09:39:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x10001, 0x800f4d2}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:39:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "7a7925e639"}, 0x9) 09:39:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "7a7925e639"}, 0x9) 09:39:22 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "7a7925e639"}, 0x9) 09:39:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "7a7925e639"}, 0x9) 09:39:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "7a7925e639"}, 0x9) [ 71.152518][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.159167][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 09:39:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "7a7925e639"}, 0x9) 09:39:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x10001, 0x800f4d2}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:39:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "7a7925e639"}, 0x9) [ 71.557884][ T26] Bluetooth: hci2: command 0x041b tx timeout 09:39:24 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "7a7925e639"}, 0x9) 09:39:24 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "7a7925e639"}, 0x9) 09:39:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "7a7925e639"}, 0x9) 09:39:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "7a7925e639"}, 0x9) 09:39:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x10001, 0x800f4d2}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:39:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x10001, 0x800f4d2}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:39:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x10001, 0x800f4d2}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:39:25 executing program 4: r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r0}, 0x31) 09:39:25 executing program 4: r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab542ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d10cdbe7009a6fe7cc78762f1d48cdbca64920db9a50f86c21632fd30bf05121438bb7447a4bd344e0bd74ff05d37e2bb8675a432fc48fefda5b1037b2a3f68e3b9db863c7585509004bb426e1230bc1cd4c02c499cccd73c5339c4ff04760ceb44276e9bd94d1c2e6d17dc57fcbe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf3b0e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117000000000000000000000097f0b12af2b6ed89a2a0b65549ada76b2b891d4d46d666108379e15d4eb488c74d087aa4f7c476726612d1d8ca29b83626d2b3163d268865be8ce7b22a974554618600d0b65fdf2751ce4d20a80e982dfce3ef1e63ad794d1a022585b3aa44df55de1f5774c1ba0d206537a816573a69f42040c1f6c2d8936b0194de9898e892385bb69708c3621c5de1dd5c5dba53ad16d58921ed1d518ea7176e5144c5b25c4e761adf264a85c14cbcf38a42cc44e88c707f2176089bc5ef13712649faea282f1eb338679f14d3d487"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r0}, 0x31) 09:39:25 executing program 1: r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab542ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d10cdbe7009a6fe7cc78762f1d48cdbca64920db9a50f86c21632fd30bf05121438bb7447a4bd344e0bd74ff05d37e2bb8675a432fc48fefda5b1037b2a3f68e3b9db863c7585509004bb426e1230bc1cd4c02c499cccd73c5339c4ff04760ceb44276e9bd94d1c2e6d17dc57fcbe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf3b0e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117000000000000000000000097f0b12af2b6ed89a2a0b65549ada76b2b891d4d46d666108379e15d4eb488c74d087aa4f7c476726612d1d8ca29b83626d2b3163d268865be8ce7b22a974554618600d0b65fdf2751ce4d20a80e982dfce3ef1e63ad794d1a022585b3aa44df55de1f5774c1ba0d206537a816573a69f42040c1f6c2d8936b0194de9898e892385bb69708c3621c5de1dd5c5dba53ad16d58921ed1d518ea7176e5144c5b25c4e761adf264a85c14cbcf38a42cc44e88c707f2176089bc5ef13712649faea282f1eb338679f14d3d487"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r0}, 0x31) [ 73.638853][ T26] Bluetooth: hci2: command 0x040f tx timeout 09:39:25 executing program 4: r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r0}, 0x31) 09:39:26 executing program 4: r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r0}, 0x31) 09:39:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x10001, 0x800f4d2}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:39:26 executing program 4: r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r0}, 0x31) 09:39:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x10001, 0x800f4d2}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:39:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "7a7925e639"}, 0x9) 09:39:26 executing program 1: r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r0}, 0x31) 09:39:26 executing program 4: r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r0}, 0x31) 09:39:26 executing program 1: r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab542ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d10cdbe7009a6fe7cc78762f1d48cdbca64920db9a50f86c21632fd30bf05121438bb7447a4bd344e0bd74ff05d37e2bb8675a432fc48fefda5b1037b2a3f68e3b9db863c7585509004bb426e1230bc1cd4c02c499cccd73c5339c4ff04760ceb44276e9bd94d1c2e6d17dc57fcbe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf3b0e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117000000000000000000000097f0b12af2b6ed89a2a0b65549ada76b2b891d4d46d666108379e15d4eb488c74d087aa4f7c476726612d1d8ca29b83626d2b3163d268865be8ce7b22a974554618600d0b65fdf2751ce4d20a80e982dfce3ef1e63ad794d1a022585b3aa44df55de1f5774c1ba0d206537a816573a69f42040c1f6c2d8936b0194de9898e892385bb69708c3621c5de1dd5c5dba53ad16d58921ed1d518ea7176e5144c5b25c4e761adf264a85c14cbcf38a42cc44e88c707f2176089bc5ef13712649faea282f1eb338679f14d3d487"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r0}, 0x31) 09:39:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x10001, 0x800f4d2}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:39:26 executing program 4: r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r0}, 0x31) 09:39:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x31, 0x0, 0x0) 09:39:26 executing program 4: r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r0}, 0x31) 09:39:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x31, 0x0, 0x0) 09:39:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x31, 0x0, 0x0) 09:39:27 executing program 4: r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r0}, 0x31) 09:39:27 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x10001, 0x800f4d2}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:39:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x31, 0x0, 0x0) 09:39:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1e4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TESTDATA={0xf1, 0x45, "70e4f510d8f403b312a69fa66f5a455efabd64cfaaf47ad4668f98d8340e894df1c08a06fc027307185f3feca69bca209858cc9f9b14aa11a361502b79dda4a04bcf9d1d7cc7773a3d6593e8ecb9df41a9d8d94695a7407fc7e88fc79bb7dc0b7afc2debf86c6641fc71e11ec84042b263c559022b3507507f8d46261fc46896245412202652bfcb6b3a7f005705819609d6b8109e032a92566135a6b14c7b7dc0579e55143219b5a0136f636ccf9796b41191837c434372f98ee87053abfdf8eb4f6f52ab16e372dbdd72df516e0cd727d994d2b30f1ead7d775377045a897d7b4d946bab97e7c53b5f45caa9"}, @NL80211_ATTR_TESTDATA={0xa5, 0x45, "378830abe22ac749ebd6b8070e57508cb1ca9b60f06a1e7f79521ff234553125eb764b84e1fffd54bbc714b02b1ad4b9cb118aa9cf7aa33ca70814fc4dc149542498128e53a5182a59c46271364c893051bf0462793165736d6fdf685fb1d9c76371a742add1d9d6d1cd0d00f28749fe69a4cdb63337cde502874479d357c1f1119f77099f3123a2e435aceab96632e9267ff31ad94e8e33c5554a4906b383cd6f"}, @NL80211_ATTR_TESTDATA={0x21, 0x45, "fe537ac6ccc2b95239adc6d3cbafe10c1b17bd1bcd172c284a9074ce7e"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x1e4}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 09:39:27 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x7, 0x2, 0x3, 0x7, 0x8, 0x3}, 0x20) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) 09:39:27 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x42, '\x00', @ipv4={'\x00', '\xff\xff', @loopback}}}}}}}, 0x0) 09:39:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x10001, 0x800f4d2}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:39:27 executing program 1: r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) connect$tipc(r0, &(0x7f0000000100)=@name, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) 09:39:27 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x7, 0x2, 0x3, 0x7, 0x8, 0x3}, 0x20) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) 09:39:27 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x7, 0x2, 0x3, 0x7, 0x8, 0x3}, 0x20) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) [ 75.560019][ T27] audit: type=1804 audit(1651743567.689:2): pid=3883 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4123632962/syzkaller.gfxNiq/7/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 09:39:27 executing program 1: r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) connect$tipc(r0, &(0x7f0000000100)=@name, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) 09:39:27 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x42, '\x00', @ipv4={'\x00', '\xff\xff', @loopback}}}}}}}, 0x0) 09:39:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1e4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TESTDATA={0xf1, 0x45, "70e4f510d8f403b312a69fa66f5a455efabd64cfaaf47ad4668f98d8340e894df1c08a06fc027307185f3feca69bca209858cc9f9b14aa11a361502b79dda4a04bcf9d1d7cc7773a3d6593e8ecb9df41a9d8d94695a7407fc7e88fc79bb7dc0b7afc2debf86c6641fc71e11ec84042b263c559022b3507507f8d46261fc46896245412202652bfcb6b3a7f005705819609d6b8109e032a92566135a6b14c7b7dc0579e55143219b5a0136f636ccf9796b41191837c434372f98ee87053abfdf8eb4f6f52ab16e372dbdd72df516e0cd727d994d2b30f1ead7d775377045a897d7b4d946bab97e7c53b5f45caa9"}, @NL80211_ATTR_TESTDATA={0xa5, 0x45, "378830abe22ac749ebd6b8070e57508cb1ca9b60f06a1e7f79521ff234553125eb764b84e1fffd54bbc714b02b1ad4b9cb118aa9cf7aa33ca70814fc4dc149542498128e53a5182a59c46271364c893051bf0462793165736d6fdf685fb1d9c76371a742add1d9d6d1cd0d00f28749fe69a4cdb63337cde502874479d357c1f1119f77099f3123a2e435aceab96632e9267ff31ad94e8e33c5554a4906b383cd6f"}, @NL80211_ATTR_TESTDATA={0x21, 0x45, "fe537ac6ccc2b95239adc6d3cbafe10c1b17bd1bcd172c284a9074ce7e"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x1e4}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) [ 75.708672][ T22] Bluetooth: hci2: command 0x0419 tx timeout [ 76.028938][ T27] audit: type=1804 audit(1651743568.159:3): pid=3910 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4123632962/syzkaller.gfxNiq/8/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 09:39:28 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x7, 0x2, 0x3, 0x7, 0x8, 0x3}, 0x20) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) 09:39:28 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x42, '\x00', @ipv4={'\x00', '\xff\xff', @loopback}}}}}}}, 0x0) 09:39:28 executing program 1: r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) connect$tipc(r0, &(0x7f0000000100)=@name, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) [ 76.272752][ T1129] cfg80211: failed to load regulatory.db 09:39:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1e4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TESTDATA={0xf1, 0x45, "70e4f510d8f403b312a69fa66f5a455efabd64cfaaf47ad4668f98d8340e894df1c08a06fc027307185f3feca69bca209858cc9f9b14aa11a361502b79dda4a04bcf9d1d7cc7773a3d6593e8ecb9df41a9d8d94695a7407fc7e88fc79bb7dc0b7afc2debf86c6641fc71e11ec84042b263c559022b3507507f8d46261fc46896245412202652bfcb6b3a7f005705819609d6b8109e032a92566135a6b14c7b7dc0579e55143219b5a0136f636ccf9796b41191837c434372f98ee87053abfdf8eb4f6f52ab16e372dbdd72df516e0cd727d994d2b30f1ead7d775377045a897d7b4d946bab97e7c53b5f45caa9"}, @NL80211_ATTR_TESTDATA={0xa5, 0x45, "378830abe22ac749ebd6b8070e57508cb1ca9b60f06a1e7f79521ff234553125eb764b84e1fffd54bbc714b02b1ad4b9cb118aa9cf7aa33ca70814fc4dc149542498128e53a5182a59c46271364c893051bf0462793165736d6fdf685fb1d9c76371a742add1d9d6d1cd0d00f28749fe69a4cdb63337cde502874479d357c1f1119f77099f3123a2e435aceab96632e9267ff31ad94e8e33c5554a4906b383cd6f"}, @NL80211_ATTR_TESTDATA={0x21, 0x45, "fe537ac6ccc2b95239adc6d3cbafe10c1b17bd1bcd172c284a9074ce7e"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x1e4}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 09:39:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1e4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TESTDATA={0xf1, 0x45, "70e4f510d8f403b312a69fa66f5a455efabd64cfaaf47ad4668f98d8340e894df1c08a06fc027307185f3feca69bca209858cc9f9b14aa11a361502b79dda4a04bcf9d1d7cc7773a3d6593e8ecb9df41a9d8d94695a7407fc7e88fc79bb7dc0b7afc2debf86c6641fc71e11ec84042b263c559022b3507507f8d46261fc46896245412202652bfcb6b3a7f005705819609d6b8109e032a92566135a6b14c7b7dc0579e55143219b5a0136f636ccf9796b41191837c434372f98ee87053abfdf8eb4f6f52ab16e372dbdd72df516e0cd727d994d2b30f1ead7d775377045a897d7b4d946bab97e7c53b5f45caa9"}, @NL80211_ATTR_TESTDATA={0xa5, 0x45, "378830abe22ac749ebd6b8070e57508cb1ca9b60f06a1e7f79521ff234553125eb764b84e1fffd54bbc714b02b1ad4b9cb118aa9cf7aa33ca70814fc4dc149542498128e53a5182a59c46271364c893051bf0462793165736d6fdf685fb1d9c76371a742add1d9d6d1cd0d00f28749fe69a4cdb63337cde502874479d357c1f1119f77099f3123a2e435aceab96632e9267ff31ad94e8e33c5554a4906b383cd6f"}, @NL80211_ATTR_TESTDATA={0x21, 0x45, "fe537ac6ccc2b95239adc6d3cbafe10c1b17bd1bcd172c284a9074ce7e"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x1e4}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) [ 76.601459][ T27] audit: type=1804 audit(1651743568.719:4): pid=3918 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4123632962/syzkaller.gfxNiq/9/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 09:39:28 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x42, '\x00', @ipv4={'\x00', '\xff\xff', @loopback}}}}}}}, 0x0) 09:39:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1e4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TESTDATA={0xf1, 0x45, "70e4f510d8f403b312a69fa66f5a455efabd64cfaaf47ad4668f98d8340e894df1c08a06fc027307185f3feca69bca209858cc9f9b14aa11a361502b79dda4a04bcf9d1d7cc7773a3d6593e8ecb9df41a9d8d94695a7407fc7e88fc79bb7dc0b7afc2debf86c6641fc71e11ec84042b263c559022b3507507f8d46261fc46896245412202652bfcb6b3a7f005705819609d6b8109e032a92566135a6b14c7b7dc0579e55143219b5a0136f636ccf9796b41191837c434372f98ee87053abfdf8eb4f6f52ab16e372dbdd72df516e0cd727d994d2b30f1ead7d775377045a897d7b4d946bab97e7c53b5f45caa9"}, @NL80211_ATTR_TESTDATA={0xa5, 0x45, "378830abe22ac749ebd6b8070e57508cb1ca9b60f06a1e7f79521ff234553125eb764b84e1fffd54bbc714b02b1ad4b9cb118aa9cf7aa33ca70814fc4dc149542498128e53a5182a59c46271364c893051bf0462793165736d6fdf685fb1d9c76371a742add1d9d6d1cd0d00f28749fe69a4cdb63337cde502874479d357c1f1119f77099f3123a2e435aceab96632e9267ff31ad94e8e33c5554a4906b383cd6f"}, @NL80211_ATTR_TESTDATA={0x21, 0x45, "fe537ac6ccc2b95239adc6d3cbafe10c1b17bd1bcd172c284a9074ce7e"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x1e4}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 09:39:28 executing program 1: r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) connect$tipc(r0, &(0x7f0000000100)=@name, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) 09:39:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1e4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TESTDATA={0xf1, 0x45, "70e4f510d8f403b312a69fa66f5a455efabd64cfaaf47ad4668f98d8340e894df1c08a06fc027307185f3feca69bca209858cc9f9b14aa11a361502b79dda4a04bcf9d1d7cc7773a3d6593e8ecb9df41a9d8d94695a7407fc7e88fc79bb7dc0b7afc2debf86c6641fc71e11ec84042b263c559022b3507507f8d46261fc46896245412202652bfcb6b3a7f005705819609d6b8109e032a92566135a6b14c7b7dc0579e55143219b5a0136f636ccf9796b41191837c434372f98ee87053abfdf8eb4f6f52ab16e372dbdd72df516e0cd727d994d2b30f1ead7d775377045a897d7b4d946bab97e7c53b5f45caa9"}, @NL80211_ATTR_TESTDATA={0xa5, 0x45, "378830abe22ac749ebd6b8070e57508cb1ca9b60f06a1e7f79521ff234553125eb764b84e1fffd54bbc714b02b1ad4b9cb118aa9cf7aa33ca70814fc4dc149542498128e53a5182a59c46271364c893051bf0462793165736d6fdf685fb1d9c76371a742add1d9d6d1cd0d00f28749fe69a4cdb63337cde502874479d357c1f1119f77099f3123a2e435aceab96632e9267ff31ad94e8e33c5554a4906b383cd6f"}, @NL80211_ATTR_TESTDATA={0x21, 0x45, "fe537ac6ccc2b95239adc6d3cbafe10c1b17bd1bcd172c284a9074ce7e"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x1e4}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 09:39:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1e4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TESTDATA={0xf1, 0x45, "70e4f510d8f403b312a69fa66f5a455efabd64cfaaf47ad4668f98d8340e894df1c08a06fc027307185f3feca69bca209858cc9f9b14aa11a361502b79dda4a04bcf9d1d7cc7773a3d6593e8ecb9df41a9d8d94695a7407fc7e88fc79bb7dc0b7afc2debf86c6641fc71e11ec84042b263c559022b3507507f8d46261fc46896245412202652bfcb6b3a7f005705819609d6b8109e032a92566135a6b14c7b7dc0579e55143219b5a0136f636ccf9796b41191837c434372f98ee87053abfdf8eb4f6f52ab16e372dbdd72df516e0cd727d994d2b30f1ead7d775377045a897d7b4d946bab97e7c53b5f45caa9"}, @NL80211_ATTR_TESTDATA={0xa5, 0x45, "378830abe22ac749ebd6b8070e57508cb1ca9b60f06a1e7f79521ff234553125eb764b84e1fffd54bbc714b02b1ad4b9cb118aa9cf7aa33ca70814fc4dc149542498128e53a5182a59c46271364c893051bf0462793165736d6fdf685fb1d9c76371a742add1d9d6d1cd0d00f28749fe69a4cdb63337cde502874479d357c1f1119f77099f3123a2e435aceab96632e9267ff31ad94e8e33c5554a4906b383cd6f"}, @NL80211_ATTR_TESTDATA={0x21, 0x45, "fe537ac6ccc2b95239adc6d3cbafe10c1b17bd1bcd172c284a9074ce7e"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x1e4}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 09:39:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1e4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TESTDATA={0xf1, 0x45, "70e4f510d8f403b312a69fa66f5a455efabd64cfaaf47ad4668f98d8340e894df1c08a06fc027307185f3feca69bca209858cc9f9b14aa11a361502b79dda4a04bcf9d1d7cc7773a3d6593e8ecb9df41a9d8d94695a7407fc7e88fc79bb7dc0b7afc2debf86c6641fc71e11ec84042b263c559022b3507507f8d46261fc46896245412202652bfcb6b3a7f005705819609d6b8109e032a92566135a6b14c7b7dc0579e55143219b5a0136f636ccf9796b41191837c434372f98ee87053abfdf8eb4f6f52ab16e372dbdd72df516e0cd727d994d2b30f1ead7d775377045a897d7b4d946bab97e7c53b5f45caa9"}, @NL80211_ATTR_TESTDATA={0xa5, 0x45, "378830abe22ac749ebd6b8070e57508cb1ca9b60f06a1e7f79521ff234553125eb764b84e1fffd54bbc714b02b1ad4b9cb118aa9cf7aa33ca70814fc4dc149542498128e53a5182a59c46271364c893051bf0462793165736d6fdf685fb1d9c76371a742add1d9d6d1cd0d00f28749fe69a4cdb63337cde502874479d357c1f1119f77099f3123a2e435aceab96632e9267ff31ad94e8e33c5554a4906b383cd6f"}, @NL80211_ATTR_TESTDATA={0x21, 0x45, "fe537ac6ccc2b95239adc6d3cbafe10c1b17bd1bcd172c284a9074ce7e"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x1e4}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 09:39:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1e4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TESTDATA={0xf1, 0x45, "70e4f510d8f403b312a69fa66f5a455efabd64cfaaf47ad4668f98d8340e894df1c08a06fc027307185f3feca69bca209858cc9f9b14aa11a361502b79dda4a04bcf9d1d7cc7773a3d6593e8ecb9df41a9d8d94695a7407fc7e88fc79bb7dc0b7afc2debf86c6641fc71e11ec84042b263c559022b3507507f8d46261fc46896245412202652bfcb6b3a7f005705819609d6b8109e032a92566135a6b14c7b7dc0579e55143219b5a0136f636ccf9796b41191837c434372f98ee87053abfdf8eb4f6f52ab16e372dbdd72df516e0cd727d994d2b30f1ead7d775377045a897d7b4d946bab97e7c53b5f45caa9"}, @NL80211_ATTR_TESTDATA={0xa5, 0x45, "378830abe22ac749ebd6b8070e57508cb1ca9b60f06a1e7f79521ff234553125eb764b84e1fffd54bbc714b02b1ad4b9cb118aa9cf7aa33ca70814fc4dc149542498128e53a5182a59c46271364c893051bf0462793165736d6fdf685fb1d9c76371a742add1d9d6d1cd0d00f28749fe69a4cdb63337cde502874479d357c1f1119f77099f3123a2e435aceab96632e9267ff31ad94e8e33c5554a4906b383cd6f"}, @NL80211_ATTR_TESTDATA={0x21, 0x45, "fe537ac6ccc2b95239adc6d3cbafe10c1b17bd1bcd172c284a9074ce7e"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x1e4}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) [ 76.931096][ T27] audit: type=1804 audit(1651743569.059:5): pid=3924 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1593799923/syzkaller.5husbw/10/cgroup.controllers" dev="sda1" ino=1166 res=1 errno=0 [ 77.029124][ T27] audit: type=1804 audit(1651743569.139:6): pid=3928 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2004909312/syzkaller.nZEy5i/20/cgroup.controllers" dev="sda1" ino=1185 res=1 errno=0 [ 77.158552][ T27] audit: type=1804 audit(1651743569.209:7): pid=3937 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir4039583684/syzkaller.vXk6Lf/10/cgroup.controllers" dev="sda1" ino=1180 res=1 errno=0 09:39:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1e4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TESTDATA={0xf1, 0x45, "70e4f510d8f403b312a69fa66f5a455efabd64cfaaf47ad4668f98d8340e894df1c08a06fc027307185f3feca69bca209858cc9f9b14aa11a361502b79dda4a04bcf9d1d7cc7773a3d6593e8ecb9df41a9d8d94695a7407fc7e88fc79bb7dc0b7afc2debf86c6641fc71e11ec84042b263c559022b3507507f8d46261fc46896245412202652bfcb6b3a7f005705819609d6b8109e032a92566135a6b14c7b7dc0579e55143219b5a0136f636ccf9796b41191837c434372f98ee87053abfdf8eb4f6f52ab16e372dbdd72df516e0cd727d994d2b30f1ead7d775377045a897d7b4d946bab97e7c53b5f45caa9"}, @NL80211_ATTR_TESTDATA={0xa5, 0x45, "378830abe22ac749ebd6b8070e57508cb1ca9b60f06a1e7f79521ff234553125eb764b84e1fffd54bbc714b02b1ad4b9cb118aa9cf7aa33ca70814fc4dc149542498128e53a5182a59c46271364c893051bf0462793165736d6fdf685fb1d9c76371a742add1d9d6d1cd0d00f28749fe69a4cdb63337cde502874479d357c1f1119f77099f3123a2e435aceab96632e9267ff31ad94e8e33c5554a4906b383cd6f"}, @NL80211_ATTR_TESTDATA={0x21, 0x45, "fe537ac6ccc2b95239adc6d3cbafe10c1b17bd1bcd172c284a9074ce7e"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x1e4}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 09:39:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1e4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TESTDATA={0xf1, 0x45, "70e4f510d8f403b312a69fa66f5a455efabd64cfaaf47ad4668f98d8340e894df1c08a06fc027307185f3feca69bca209858cc9f9b14aa11a361502b79dda4a04bcf9d1d7cc7773a3d6593e8ecb9df41a9d8d94695a7407fc7e88fc79bb7dc0b7afc2debf86c6641fc71e11ec84042b263c559022b3507507f8d46261fc46896245412202652bfcb6b3a7f005705819609d6b8109e032a92566135a6b14c7b7dc0579e55143219b5a0136f636ccf9796b41191837c434372f98ee87053abfdf8eb4f6f52ab16e372dbdd72df516e0cd727d994d2b30f1ead7d775377045a897d7b4d946bab97e7c53b5f45caa9"}, @NL80211_ATTR_TESTDATA={0xa5, 0x45, "378830abe22ac749ebd6b8070e57508cb1ca9b60f06a1e7f79521ff234553125eb764b84e1fffd54bbc714b02b1ad4b9cb118aa9cf7aa33ca70814fc4dc149542498128e53a5182a59c46271364c893051bf0462793165736d6fdf685fb1d9c76371a742add1d9d6d1cd0d00f28749fe69a4cdb63337cde502874479d357c1f1119f77099f3123a2e435aceab96632e9267ff31ad94e8e33c5554a4906b383cd6f"}, @NL80211_ATTR_TESTDATA={0x21, 0x45, "fe537ac6ccc2b95239adc6d3cbafe10c1b17bd1bcd172c284a9074ce7e"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x1e4}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) [ 77.323066][ T27] audit: type=1804 audit(1651743569.379:8): pid=3936 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3340390006/syzkaller.LaE1F9/11/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 09:39:29 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1e4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TESTDATA={0xf1, 0x45, "70e4f510d8f403b312a69fa66f5a455efabd64cfaaf47ad4668f98d8340e894df1c08a06fc027307185f3feca69bca209858cc9f9b14aa11a361502b79dda4a04bcf9d1d7cc7773a3d6593e8ecb9df41a9d8d94695a7407fc7e88fc79bb7dc0b7afc2debf86c6641fc71e11ec84042b263c559022b3507507f8d46261fc46896245412202652bfcb6b3a7f005705819609d6b8109e032a92566135a6b14c7b7dc0579e55143219b5a0136f636ccf9796b41191837c434372f98ee87053abfdf8eb4f6f52ab16e372dbdd72df516e0cd727d994d2b30f1ead7d775377045a897d7b4d946bab97e7c53b5f45caa9"}, @NL80211_ATTR_TESTDATA={0xa5, 0x45, "378830abe22ac749ebd6b8070e57508cb1ca9b60f06a1e7f79521ff234553125eb764b84e1fffd54bbc714b02b1ad4b9cb118aa9cf7aa33ca70814fc4dc149542498128e53a5182a59c46271364c893051bf0462793165736d6fdf685fb1d9c76371a742add1d9d6d1cd0d00f28749fe69a4cdb63337cde502874479d357c1f1119f77099f3123a2e435aceab96632e9267ff31ad94e8e33c5554a4906b383cd6f"}, @NL80211_ATTR_TESTDATA={0x21, 0x45, "fe537ac6ccc2b95239adc6d3cbafe10c1b17bd1bcd172c284a9074ce7e"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x1e4}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) [ 77.470686][ T27] audit: type=1804 audit(1651743569.469:9): pid=3941 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir721484726/syzkaller.XncMGl/24/cgroup.controllers" dev="sda1" ino=1191 res=1 errno=0 09:39:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1e4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TESTDATA={0xf1, 0x45, "70e4f510d8f403b312a69fa66f5a455efabd64cfaaf47ad4668f98d8340e894df1c08a06fc027307185f3feca69bca209858cc9f9b14aa11a361502b79dda4a04bcf9d1d7cc7773a3d6593e8ecb9df41a9d8d94695a7407fc7e88fc79bb7dc0b7afc2debf86c6641fc71e11ec84042b263c559022b3507507f8d46261fc46896245412202652bfcb6b3a7f005705819609d6b8109e032a92566135a6b14c7b7dc0579e55143219b5a0136f636ccf9796b41191837c434372f98ee87053abfdf8eb4f6f52ab16e372dbdd72df516e0cd727d994d2b30f1ead7d775377045a897d7b4d946bab97e7c53b5f45caa9"}, @NL80211_ATTR_TESTDATA={0xa5, 0x45, "378830abe22ac749ebd6b8070e57508cb1ca9b60f06a1e7f79521ff234553125eb764b84e1fffd54bbc714b02b1ad4b9cb118aa9cf7aa33ca70814fc4dc149542498128e53a5182a59c46271364c893051bf0462793165736d6fdf685fb1d9c76371a742add1d9d6d1cd0d00f28749fe69a4cdb63337cde502874479d357c1f1119f77099f3123a2e435aceab96632e9267ff31ad94e8e33c5554a4906b383cd6f"}, @NL80211_ATTR_TESTDATA={0x21, 0x45, "fe537ac6ccc2b95239adc6d3cbafe10c1b17bd1bcd172c284a9074ce7e"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x1e4}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) [ 77.619599][ T27] audit: type=1804 audit(1651743569.639:10): pid=3944 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4123632962/syzkaller.gfxNiq/10/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 09:39:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1e4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TESTDATA={0xf1, 0x45, "70e4f510d8f403b312a69fa66f5a455efabd64cfaaf47ad4668f98d8340e894df1c08a06fc027307185f3feca69bca209858cc9f9b14aa11a361502b79dda4a04bcf9d1d7cc7773a3d6593e8ecb9df41a9d8d94695a7407fc7e88fc79bb7dc0b7afc2debf86c6641fc71e11ec84042b263c559022b3507507f8d46261fc46896245412202652bfcb6b3a7f005705819609d6b8109e032a92566135a6b14c7b7dc0579e55143219b5a0136f636ccf9796b41191837c434372f98ee87053abfdf8eb4f6f52ab16e372dbdd72df516e0cd727d994d2b30f1ead7d775377045a897d7b4d946bab97e7c53b5f45caa9"}, @NL80211_ATTR_TESTDATA={0xa5, 0x45, "378830abe22ac749ebd6b8070e57508cb1ca9b60f06a1e7f79521ff234553125eb764b84e1fffd54bbc714b02b1ad4b9cb118aa9cf7aa33ca70814fc4dc149542498128e53a5182a59c46271364c893051bf0462793165736d6fdf685fb1d9c76371a742add1d9d6d1cd0d00f28749fe69a4cdb63337cde502874479d357c1f1119f77099f3123a2e435aceab96632e9267ff31ad94e8e33c5554a4906b383cd6f"}, @NL80211_ATTR_TESTDATA={0x21, 0x45, "fe537ac6ccc2b95239adc6d3cbafe10c1b17bd1bcd172c284a9074ce7e"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x1e4}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) [ 77.759206][ T27] audit: type=1804 audit(1651743569.729:11): pid=3947 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir4039583684/syzkaller.vXk6Lf/11/cgroup.controllers" dev="sda1" ino=1166 res=1 errno=0 09:39:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1e4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TESTDATA={0xf1, 0x45, "70e4f510d8f403b312a69fa66f5a455efabd64cfaaf47ad4668f98d8340e894df1c08a06fc027307185f3feca69bca209858cc9f9b14aa11a361502b79dda4a04bcf9d1d7cc7773a3d6593e8ecb9df41a9d8d94695a7407fc7e88fc79bb7dc0b7afc2debf86c6641fc71e11ec84042b263c559022b3507507f8d46261fc46896245412202652bfcb6b3a7f005705819609d6b8109e032a92566135a6b14c7b7dc0579e55143219b5a0136f636ccf9796b41191837c434372f98ee87053abfdf8eb4f6f52ab16e372dbdd72df516e0cd727d994d2b30f1ead7d775377045a897d7b4d946bab97e7c53b5f45caa9"}, @NL80211_ATTR_TESTDATA={0xa5, 0x45, "378830abe22ac749ebd6b8070e57508cb1ca9b60f06a1e7f79521ff234553125eb764b84e1fffd54bbc714b02b1ad4b9cb118aa9cf7aa33ca70814fc4dc149542498128e53a5182a59c46271364c893051bf0462793165736d6fdf685fb1d9c76371a742add1d9d6d1cd0d00f28749fe69a4cdb63337cde502874479d357c1f1119f77099f3123a2e435aceab96632e9267ff31ad94e8e33c5554a4906b383cd6f"}, @NL80211_ATTR_TESTDATA={0x21, 0x45, "fe537ac6ccc2b95239adc6d3cbafe10c1b17bd1bcd172c284a9074ce7e"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x1e4}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 09:39:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1e4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TESTDATA={0xf1, 0x45, "70e4f510d8f403b312a69fa66f5a455efabd64cfaaf47ad4668f98d8340e894df1c08a06fc027307185f3feca69bca209858cc9f9b14aa11a361502b79dda4a04bcf9d1d7cc7773a3d6593e8ecb9df41a9d8d94695a7407fc7e88fc79bb7dc0b7afc2debf86c6641fc71e11ec84042b263c559022b3507507f8d46261fc46896245412202652bfcb6b3a7f005705819609d6b8109e032a92566135a6b14c7b7dc0579e55143219b5a0136f636ccf9796b41191837c434372f98ee87053abfdf8eb4f6f52ab16e372dbdd72df516e0cd727d994d2b30f1ead7d775377045a897d7b4d946bab97e7c53b5f45caa9"}, @NL80211_ATTR_TESTDATA={0xa5, 0x45, "378830abe22ac749ebd6b8070e57508cb1ca9b60f06a1e7f79521ff234553125eb764b84e1fffd54bbc714b02b1ad4b9cb118aa9cf7aa33ca70814fc4dc149542498128e53a5182a59c46271364c893051bf0462793165736d6fdf685fb1d9c76371a742add1d9d6d1cd0d00f28749fe69a4cdb63337cde502874479d357c1f1119f77099f3123a2e435aceab96632e9267ff31ad94e8e33c5554a4906b383cd6f"}, @NL80211_ATTR_TESTDATA={0x21, 0x45, "fe537ac6ccc2b95239adc6d3cbafe10c1b17bd1bcd172c284a9074ce7e"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x1e4}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 09:39:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1e4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TESTDATA={0xf1, 0x45, "70e4f510d8f403b312a69fa66f5a455efabd64cfaaf47ad4668f98d8340e894df1c08a06fc027307185f3feca69bca209858cc9f9b14aa11a361502b79dda4a04bcf9d1d7cc7773a3d6593e8ecb9df41a9d8d94695a7407fc7e88fc79bb7dc0b7afc2debf86c6641fc71e11ec84042b263c559022b3507507f8d46261fc46896245412202652bfcb6b3a7f005705819609d6b8109e032a92566135a6b14c7b7dc0579e55143219b5a0136f636ccf9796b41191837c434372f98ee87053abfdf8eb4f6f52ab16e372dbdd72df516e0cd727d994d2b30f1ead7d775377045a897d7b4d946bab97e7c53b5f45caa9"}, @NL80211_ATTR_TESTDATA={0xa5, 0x45, "378830abe22ac749ebd6b8070e57508cb1ca9b60f06a1e7f79521ff234553125eb764b84e1fffd54bbc714b02b1ad4b9cb118aa9cf7aa33ca70814fc4dc149542498128e53a5182a59c46271364c893051bf0462793165736d6fdf685fb1d9c76371a742add1d9d6d1cd0d00f28749fe69a4cdb63337cde502874479d357c1f1119f77099f3123a2e435aceab96632e9267ff31ad94e8e33c5554a4906b383cd6f"}, @NL80211_ATTR_TESTDATA={0x21, 0x45, "fe537ac6ccc2b95239adc6d3cbafe10c1b17bd1bcd172c284a9074ce7e"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x1e4}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 09:39:30 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1e4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TESTDATA={0xf1, 0x45, "70e4f510d8f403b312a69fa66f5a455efabd64cfaaf47ad4668f98d8340e894df1c08a06fc027307185f3feca69bca209858cc9f9b14aa11a361502b79dda4a04bcf9d1d7cc7773a3d6593e8ecb9df41a9d8d94695a7407fc7e88fc79bb7dc0b7afc2debf86c6641fc71e11ec84042b263c559022b3507507f8d46261fc46896245412202652bfcb6b3a7f005705819609d6b8109e032a92566135a6b14c7b7dc0579e55143219b5a0136f636ccf9796b41191837c434372f98ee87053abfdf8eb4f6f52ab16e372dbdd72df516e0cd727d994d2b30f1ead7d775377045a897d7b4d946bab97e7c53b5f45caa9"}, @NL80211_ATTR_TESTDATA={0xa5, 0x45, "378830abe22ac749ebd6b8070e57508cb1ca9b60f06a1e7f79521ff234553125eb764b84e1fffd54bbc714b02b1ad4b9cb118aa9cf7aa33ca70814fc4dc149542498128e53a5182a59c46271364c893051bf0462793165736d6fdf685fb1d9c76371a742add1d9d6d1cd0d00f28749fe69a4cdb63337cde502874479d357c1f1119f77099f3123a2e435aceab96632e9267ff31ad94e8e33c5554a4906b383cd6f"}, @NL80211_ATTR_TESTDATA={0x21, 0x45, "fe537ac6ccc2b95239adc6d3cbafe10c1b17bd1bcd172c284a9074ce7e"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x1e4}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 09:39:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1e4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TESTDATA={0xf1, 0x45, "70e4f510d8f403b312a69fa66f5a455efabd64cfaaf47ad4668f98d8340e894df1c08a06fc027307185f3feca69bca209858cc9f9b14aa11a361502b79dda4a04bcf9d1d7cc7773a3d6593e8ecb9df41a9d8d94695a7407fc7e88fc79bb7dc0b7afc2debf86c6641fc71e11ec84042b263c559022b3507507f8d46261fc46896245412202652bfcb6b3a7f005705819609d6b8109e032a92566135a6b14c7b7dc0579e55143219b5a0136f636ccf9796b41191837c434372f98ee87053abfdf8eb4f6f52ab16e372dbdd72df516e0cd727d994d2b30f1ead7d775377045a897d7b4d946bab97e7c53b5f45caa9"}, @NL80211_ATTR_TESTDATA={0xa5, 0x45, "378830abe22ac749ebd6b8070e57508cb1ca9b60f06a1e7f79521ff234553125eb764b84e1fffd54bbc714b02b1ad4b9cb118aa9cf7aa33ca70814fc4dc149542498128e53a5182a59c46271364c893051bf0462793165736d6fdf685fb1d9c76371a742add1d9d6d1cd0d00f28749fe69a4cdb63337cde502874479d357c1f1119f77099f3123a2e435aceab96632e9267ff31ad94e8e33c5554a4906b383cd6f"}, @NL80211_ATTR_TESTDATA={0x21, 0x45, "fe537ac6ccc2b95239adc6d3cbafe10c1b17bd1bcd172c284a9074ce7e"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x1e4}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 09:39:30 executing program 5: r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) connect$tipc(r0, &(0x7f0000000100)=@name, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) 09:39:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1e4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TESTDATA={0xf1, 0x45, "70e4f510d8f403b312a69fa66f5a455efabd64cfaaf47ad4668f98d8340e894df1c08a06fc027307185f3feca69bca209858cc9f9b14aa11a361502b79dda4a04bcf9d1d7cc7773a3d6593e8ecb9df41a9d8d94695a7407fc7e88fc79bb7dc0b7afc2debf86c6641fc71e11ec84042b263c559022b3507507f8d46261fc46896245412202652bfcb6b3a7f005705819609d6b8109e032a92566135a6b14c7b7dc0579e55143219b5a0136f636ccf9796b41191837c434372f98ee87053abfdf8eb4f6f52ab16e372dbdd72df516e0cd727d994d2b30f1ead7d775377045a897d7b4d946bab97e7c53b5f45caa9"}, @NL80211_ATTR_TESTDATA={0xa5, 0x45, "378830abe22ac749ebd6b8070e57508cb1ca9b60f06a1e7f79521ff234553125eb764b84e1fffd54bbc714b02b1ad4b9cb118aa9cf7aa33ca70814fc4dc149542498128e53a5182a59c46271364c893051bf0462793165736d6fdf685fb1d9c76371a742add1d9d6d1cd0d00f28749fe69a4cdb63337cde502874479d357c1f1119f77099f3123a2e435aceab96632e9267ff31ad94e8e33c5554a4906b383cd6f"}, @NL80211_ATTR_TESTDATA={0x21, 0x45, "fe537ac6ccc2b95239adc6d3cbafe10c1b17bd1bcd172c284a9074ce7e"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x1e4}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 09:39:31 executing program 5: r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) connect$tipc(r0, &(0x7f0000000100)=@name, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) 09:39:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1e4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TESTDATA={0xf1, 0x45, "70e4f510d8f403b312a69fa66f5a455efabd64cfaaf47ad4668f98d8340e894df1c08a06fc027307185f3feca69bca209858cc9f9b14aa11a361502b79dda4a04bcf9d1d7cc7773a3d6593e8ecb9df41a9d8d94695a7407fc7e88fc79bb7dc0b7afc2debf86c6641fc71e11ec84042b263c559022b3507507f8d46261fc46896245412202652bfcb6b3a7f005705819609d6b8109e032a92566135a6b14c7b7dc0579e55143219b5a0136f636ccf9796b41191837c434372f98ee87053abfdf8eb4f6f52ab16e372dbdd72df516e0cd727d994d2b30f1ead7d775377045a897d7b4d946bab97e7c53b5f45caa9"}, @NL80211_ATTR_TESTDATA={0xa5, 0x45, "378830abe22ac749ebd6b8070e57508cb1ca9b60f06a1e7f79521ff234553125eb764b84e1fffd54bbc714b02b1ad4b9cb118aa9cf7aa33ca70814fc4dc149542498128e53a5182a59c46271364c893051bf0462793165736d6fdf685fb1d9c76371a742add1d9d6d1cd0d00f28749fe69a4cdb63337cde502874479d357c1f1119f77099f3123a2e435aceab96632e9267ff31ad94e8e33c5554a4906b383cd6f"}, @NL80211_ATTR_TESTDATA={0x21, 0x45, "fe537ac6ccc2b95239adc6d3cbafe10c1b17bd1bcd172c284a9074ce7e"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x1e4}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 09:39:31 executing program 4: r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) connect$tipc(r0, &(0x7f0000000100)=@name, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) 09:39:31 executing program 3: r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) connect$tipc(r0, &(0x7f0000000100)=@name, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) 09:39:31 executing program 5: r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) connect$tipc(r0, &(0x7f0000000100)=@name, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) 09:39:31 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x7, 0x2, 0x3, 0x7, 0x8, 0x3}, 0x20) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) 09:39:31 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x7, 0x2, 0x3, 0x7, 0x8, 0x3}, 0x20) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) 09:39:31 executing program 3: r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) connect$tipc(r0, &(0x7f0000000100)=@name, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) 09:39:31 executing program 4: r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) connect$tipc(r0, &(0x7f0000000100)=@name, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) 09:39:31 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x7, 0x2, 0x3, 0x7, 0x8, 0x3}, 0x20) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) 09:39:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3792a5fc8cc24007"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="63c91ccc2fd84029497f5516119e9fe6a16bb4456296e8ef12ac8d795c99ad16"}]}]}, 0x50}}, 0x0) 09:39:31 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x7, 0x2, 0x3, 0x7, 0x8, 0x3}, 0x20) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) 09:39:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1e4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TESTDATA={0xf1, 0x45, "70e4f510d8f403b312a69fa66f5a455efabd64cfaaf47ad4668f98d8340e894df1c08a06fc027307185f3feca69bca209858cc9f9b14aa11a361502b79dda4a04bcf9d1d7cc7773a3d6593e8ecb9df41a9d8d94695a7407fc7e88fc79bb7dc0b7afc2debf86c6641fc71e11ec84042b263c559022b3507507f8d46261fc46896245412202652bfcb6b3a7f005705819609d6b8109e032a92566135a6b14c7b7dc0579e55143219b5a0136f636ccf9796b41191837c434372f98ee87053abfdf8eb4f6f52ab16e372dbdd72df516e0cd727d994d2b30f1ead7d775377045a897d7b4d946bab97e7c53b5f45caa9"}, @NL80211_ATTR_TESTDATA={0xa5, 0x45, "378830abe22ac749ebd6b8070e57508cb1ca9b60f06a1e7f79521ff234553125eb764b84e1fffd54bbc714b02b1ad4b9cb118aa9cf7aa33ca70814fc4dc149542498128e53a5182a59c46271364c893051bf0462793165736d6fdf685fb1d9c76371a742add1d9d6d1cd0d00f28749fe69a4cdb63337cde502874479d357c1f1119f77099f3123a2e435aceab96632e9267ff31ad94e8e33c5554a4906b383cd6f"}, @NL80211_ATTR_TESTDATA={0x21, 0x45, "fe537ac6ccc2b95239adc6d3cbafe10c1b17bd1bcd172c284a9074ce7e"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x1e4}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 09:39:31 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x7, 0x2, 0x3, 0x7, 0x8, 0x3}, 0x20) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) 09:39:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3792a5fc8cc24007"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="63c91ccc2fd84029497f5516119e9fe6a16bb4456296e8ef12ac8d795c99ad16"}]}]}, 0x50}}, 0x0) 09:39:31 executing program 4: r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) connect$tipc(r0, &(0x7f0000000100)=@name, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) 09:39:31 executing program 3: r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) connect$tipc(r0, &(0x7f0000000100)=@name, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) 09:39:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3792a5fc8cc24007"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="63c91ccc2fd84029497f5516119e9fe6a16bb4456296e8ef12ac8d795c99ad16"}]}]}, 0x50}}, 0x0) 09:39:31 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x7, 0x2, 0x3, 0x7, 0x8, 0x3}, 0x20) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) 09:39:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3792a5fc8cc24007"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="63c91ccc2fd84029497f5516119e9fe6a16bb4456296e8ef12ac8d795c99ad16"}]}]}, 0x50}}, 0x0) 09:39:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3792a5fc8cc24007"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="63c91ccc2fd84029497f5516119e9fe6a16bb4456296e8ef12ac8d795c99ad16"}]}]}, 0x50}}, 0x0) 09:39:31 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x0) 09:39:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3792a5fc8cc24007"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="63c91ccc2fd84029497f5516119e9fe6a16bb4456296e8ef12ac8d795c99ad16"}]}]}, 0x50}}, 0x0) 09:39:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3792a5fc8cc24007"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="63c91ccc2fd84029497f5516119e9fe6a16bb4456296e8ef12ac8d795c99ad16"}]}]}, 0x50}}, 0x0) 09:39:32 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x50, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c00028005000100000000001c002280080003400000000008000177f2267a000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000002040)={0x20, 0x0, 0x0, 0x0, 0x0, "", [@nested={0xd, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @generic="db"]}]}, 0x20}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 09:39:32 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e002176820ecc7611c593bdf1a2bd8e9678da", @ANYBLOB='#;'], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x3004, &(0x7f0000001340)=[{&(0x7f00000000c0)=""/108, 0x7ffff000}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/109, 0x6d}, {&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f00000012c0)=""/84, 0x54}], 0x5}}], 0x7, 0x34000, 0x0) 09:39:32 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x0) 09:39:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 09:39:32 executing program 5: sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, 0x0, 0x0) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) unshare(0x0) unshare(0x20000) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e40000a0cfffff22f1d36d", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000f6090001006e"], 0x140}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000040)={0x9e, 0x5, '\x00', [@generic={0x0, 0x12, "b46f8b1a396f000000000000000008000000"}, @generic={0x1, 0x19, "a8f6dfe18907420646dc2d35c5fab63951521e5871c5466e69"}]}, 0x38) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 09:39:32 executing program 2: unshare(0x60000000) pipe(0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed}, 0x8) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x6, 0x80, 0x0, 0x0) [ 80.149970][ T4049] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 09:39:32 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x0) 09:39:32 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e002176820ecc7611c593bdf1a2bd8e9678da", @ANYBLOB='#;'], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x3004, &(0x7f0000001340)=[{&(0x7f00000000c0)=""/108, 0x7ffff000}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/109, 0x6d}, {&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f00000012c0)=""/84, 0x54}], 0x5}}], 0x7, 0x34000, 0x0) [ 80.374262][ T4055] Zero length message leads to an empty skb [ 80.376319][ T4059] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 09:39:32 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e002176820ecc7611c593bdf1a2bd8e9678da", @ANYBLOB='#;'], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x3004, &(0x7f0000001340)=[{&(0x7f00000000c0)=""/108, 0x7ffff000}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/109, 0x6d}, {&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f00000012c0)=""/84, 0x54}], 0x5}}], 0x7, 0x34000, 0x0) [ 80.419435][ T4049] ================================================================== [ 80.427524][ T4049] BUG: KASAN: use-after-free in mini_qdisc_pair_swap+0x1b9/0x1f0 [ 80.435293][ T4049] Write of size 8 at addr ffff8880779c9308 by task syz-executor.1/4049 [ 80.443542][ T4049] [ 80.445870][ T4049] CPU: 1 PID: 4049 Comm: syz-executor.1 Not tainted 5.18.0-rc4-syzkaller-01289-gfa728505f3e7 #0 [ 80.456299][ T4049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.466366][ T4049] Call Trace: [ 80.469650][ T4049] [ 80.472595][ T4049] dump_stack_lvl+0xcd/0x134 [ 80.477216][ T4049] print_address_description.constprop.0.cold+0xeb/0x495 [ 80.484266][ T4049] ? mini_qdisc_pair_swap+0x1b9/0x1f0 [ 80.489670][ T4049] kasan_report.cold+0xf4/0x1c6 [ 80.494549][ T4049] ? mini_qdisc_pair_swap+0x1b9/0x1f0 [ 80.499971][ T4049] mini_qdisc_pair_swap+0x1b9/0x1f0 [ 80.505192][ T4049] ? ingress_init+0x1c0/0x1c0 [ 80.509888][ T4049] tcf_chain0_head_change.isra.0+0xb9/0x120 09:39:32 executing program 2: unshare(0x60000000) pipe(0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed}, 0x8) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x6, 0x80, 0x0, 0x0) [ 80.515804][ T4049] tc_new_tfilter+0x1d5b/0x2200 [ 80.520685][ T4049] ? tc_del_tfilter+0x1680/0x1680 [ 80.525724][ T4049] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 80.531727][ T4049] ? kfree_skbmem+0xef/0x1b0 [ 80.536332][ T4049] ? kmem_cache_free+0xdd/0x5a0 [ 80.541216][ T4049] ? tc_del_tfilter+0x1680/0x1680 [ 80.546258][ T4049] rtnetlink_rcv_msg+0x946/0xc90 [ 80.551212][ T4049] ? rtnl_fdb_dump+0x9a0/0x9a0 [ 80.555998][ T4049] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 80.561304][ T4049] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 09:39:32 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e002176820ecc7611c593bdf1a2bd8e9678da", @ANYBLOB='#;'], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x3004, &(0x7f0000001340)=[{&(0x7f00000000c0)=""/108, 0x7ffff000}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/109, 0x6d}, {&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f00000012c0)=""/84, 0x54}], 0x5}}], 0x7, 0x34000, 0x0) [ 80.567579][ T4049] ? ref_tracker_free+0x370/0x6b0 [ 80.572618][ T4049] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 80.578014][ T4049] netlink_rcv_skb+0x153/0x420 [ 80.582794][ T4049] ? rtnl_fdb_dump+0x9a0/0x9a0 [ 80.587578][ T4049] ? netlink_ack+0xa80/0xa80 [ 80.592178][ T4049] ? netlink_deliver_tap+0x1a2/0xc40 [ 80.597479][ T4049] ? netlink_deliver_tap+0x1b1/0xc40 [ 80.602787][ T4049] netlink_unicast+0x543/0x7f0 [ 80.607571][ T4049] ? netlink_attachskb+0x880/0x880 [ 80.612711][ T4049] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 80.618970][ T4049] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 80.625232][ T4049] ? __phys_addr_symbol+0x2c/0x70 [ 80.630280][ T4049] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 80.636018][ T4049] ? __check_object_size+0x16c/0x4f0 [ 80.641327][ T4049] netlink_sendmsg+0x917/0xe10 [ 80.646134][ T4049] ? netlink_unicast+0x7f0/0x7f0 [ 80.651099][ T4049] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 80.657366][ T4049] ? netlink_unicast+0x7f0/0x7f0 [ 80.662328][ T4049] sock_sendmsg+0xcf/0x120 [ 80.666764][ T4049] ____sys_sendmsg+0x334/0x810 [ 80.671550][ T4049] ? kernel_sendmsg+0x50/0x50 [ 80.676246][ T4049] ? do_recvmmsg+0x6d0/0x6d0 [ 80.680858][ T4049] ? __lock_acquire+0x163e/0x56c0 [ 80.685903][ T4049] ___sys_sendmsg+0xf3/0x170 [ 80.690513][ T4049] ? sendmsg_copy_msghdr+0x160/0x160 [ 80.695825][ T4049] ? find_held_lock+0x2d/0x110 [ 80.700610][ T4049] ? __might_fault+0xd1/0x170 [ 80.705306][ T4049] ? lock_downgrade+0x6e0/0x6e0 [ 80.710187][ T4049] __sys_sendmmsg+0x195/0x470 [ 80.714887][ T4049] ? __ia32_sys_sendmsg+0x220/0x220 [ 80.720105][ T4049] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 80.726115][ T4049] ? __context_tracking_exit+0xb8/0xe0 [ 80.731773][ T4049] ? lock_downgrade+0x6e0/0x6e0 [ 80.736647][ T4049] ? lock_downgrade+0x6e0/0x6e0 [ 80.741520][ T4049] ? restore_fpregs_from_fpstate+0xcc/0x1e0 [ 80.747445][ T4049] __x64_sys_sendmmsg+0x99/0x100 [ 80.752418][ T4049] ? syscall_enter_from_user_mode+0x21/0x70 [ 80.758339][ T4049] do_syscall_64+0x35/0xb0 [ 80.762772][ T4049] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 80.768946][ T4049] RIP: 0033:0x7f74138890e9 [ 80.773373][ T4049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 80.792993][ T4049] RSP: 002b:00007f7414955168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 80.801428][ T4049] RAX: ffffffffffffffda RBX: 00007f741399bf60 RCX: 00007f74138890e9 [ 80.809423][ T4049] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000006 [ 80.817416][ T4049] RBP: 00007f74138e308d R08: 0000000000000000 R09: 0000000000000000 [ 80.825404][ T4049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.833386][ T4049] R13: 00007ffd1e0d0abf R14: 00007f7414955300 R15: 0000000000022000 [ 80.841381][ T4049] [ 80.844406][ T4049] [ 80.846735][ T4049] Allocated by task 4055: [ 80.851059][ T4049] kasan_save_stack+0x1e/0x40 [ 80.855754][ T4049] __kasan_kmalloc+0xa9/0xd0 [ 80.860355][ T4049] qdisc_alloc+0xac/0xa10 [ 80.864702][ T4049] qdisc_create.constprop.0+0xce/0x10f0 [ 80.870263][ T4049] tc_modify_qdisc+0x4c5/0x1a00 [ 80.875124][ T4049] rtnetlink_rcv_msg+0x43a/0xc90 [ 80.880077][ T4049] netlink_rcv_skb+0x153/0x420 [ 80.884856][ T4049] netlink_unicast+0x543/0x7f0 [ 80.889637][ T4049] netlink_sendmsg+0x917/0xe10 [ 80.894418][ T4049] sock_sendmsg+0xcf/0x120 [ 80.898849][ T4049] ____sys_sendmsg+0x334/0x810 [ 80.903627][ T4049] ___sys_sendmsg+0xf3/0x170 [ 80.908235][ T4049] __sys_sendmmsg+0x195/0x470 [ 80.912924][ T4049] __x64_sys_sendmmsg+0x99/0x100 [ 80.917878][ T4049] do_syscall_64+0x35/0xb0 [ 80.922306][ T4049] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 80.928223][ T4049] [ 80.930546][ T4049] Freed by task 942: [ 80.934439][ T4049] kasan_save_stack+0x1e/0x40 [ 80.939133][ T4049] kasan_set_track+0x21/0x30 [ 80.943738][ T4049] kasan_set_free_info+0x20/0x30 [ 80.948698][ T4049] ____kasan_slab_free+0x166/0x1a0 [ 80.953825][ T4049] slab_free_freelist_hook+0x8b/0x1c0 [ 80.959210][ T4049] kfree+0xd6/0x4d0 [ 80.963031][ T4049] rcu_core+0x7b1/0x1880 [ 80.967283][ T4049] __do_softirq+0x29b/0x9c2 [ 80.971800][ T4049] [ 80.974120][ T4049] Last potentially related work creation: [ 80.979831][ T4049] kasan_save_stack+0x1e/0x40 [ 80.984521][ T4049] __kasan_record_aux_stack+0xbe/0xd0 [ 80.989913][ T4049] call_rcu+0x99/0x790 [ 80.993992][ T4049] qdisc_put_unlocked+0x6f/0x90 [ 80.998856][ T4049] tcf_block_release+0x86/0x90 [ 81.003629][ T4049] tc_new_tfilter+0xa46/0x2200 [ 81.008405][ T4049] rtnetlink_rcv_msg+0x946/0xc90 [ 81.013618][ T4049] netlink_rcv_skb+0x153/0x420 [ 81.018400][ T4049] netlink_unicast+0x543/0x7f0 [ 81.023176][ T4049] netlink_sendmsg+0x917/0xe10 [ 81.027950][ T4049] sock_sendmsg+0xcf/0x120 [ 81.032375][ T4049] ____sys_sendmsg+0x334/0x810 [ 81.037147][ T4049] ___sys_sendmsg+0xf3/0x170 [ 81.041746][ T4049] __sys_sendmmsg+0x195/0x470 [ 81.046432][ T4049] __x64_sys_sendmmsg+0x99/0x100 [ 81.051377][ T4049] do_syscall_64+0x35/0xb0 [ 81.055804][ T4049] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 81.061715][ T4049] [ 81.064034][ T4049] The buggy address belongs to the object at ffff8880779c9000 09:39:33 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x50, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c00028005000100000000001c002280080003400000000008000177f2267a000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000002040)={0x20, 0x0, 0x0, 0x0, 0x0, "", [@nested={0xd, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @generic="db"]}]}, 0x20}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) [ 81.064034][ T4049] which belongs to the cache kmalloc-1k of size 1024 [ 81.078093][ T4049] The buggy address is located 776 bytes inside of [ 81.078093][ T4049] 1024-byte region [ffff8880779c9000, ffff8880779c9400) [ 81.091467][ T4049] [ 81.093798][ T4049] The buggy address belongs to the physical page: [ 81.100217][ T4049] page:ffffea0001de7200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x779c8 [ 81.110376][ T4049] head:ffffea0001de7200 order:3 compound_mapcount:0 compound_pincount:0 [ 81.118712][ T4049] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 81.126716][ T4049] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888010c41dc0 [ 81.135313][ T4049] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 81.143897][ T4049] page dumped because: kasan: bad access detected [ 81.150309][ T4049] page_owner tracks the page as allocated [ 81.152035][ T4060] netlink: 272 bytes leftover after parsing attributes in process `syz-executor.5'. [ 81.156017][ T4049] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3646, tgid 3646 (kworker/1:4), ts 60605383068, free_ts 60561028948 [ 81.156064][ T4049] get_page_from_freelist+0xba2/0x3e00 [ 81.156098][ T4049] __alloc_pages+0x1b2/0x500 [ 81.196119][ T4049] alloc_pages+0x1aa/0x310 [ 81.200555][ T4049] allocate_slab+0x26c/0x3c0 [ 81.205164][ T4049] ___slab_alloc+0x8df/0xf20 [ 81.209768][ T4049] __slab_alloc.constprop.0+0x4d/0xa0 [ 81.215150][ T4049] __kmalloc_node_track_caller+0x2cb/0x360 [ 81.220977][ T4049] __alloc_skb+0xde/0x340 [ 81.225319][ T4049] inet6_rt_notify+0xec/0x2b0 [ 81.230013][ T4049] fib6_add+0x26e7/0x3f10 [ 81.234379][ T4049] ip6_ins_rt+0xb2/0x110 [ 81.238636][ T4049] __ipv6_ifa_notify+0x84e/0xa90 [ 81.243602][ T4049] addrconf_dad_completed+0x133/0xd80 [ 81.248990][ T4049] addrconf_dad_work+0x79f/0x1340 [ 81.254031][ T4049] process_one_work+0x996/0x1610 [ 81.258986][ T4049] worker_thread+0x665/0x1080 [ 81.263692][ T4049] page last free stack trace: [ 81.268368][ T4049] free_pcp_prepare+0x549/0xd20 09:39:33 executing program 2: unshare(0x60000000) pipe(0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @fixed}, 0x8) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x6, 0x80, 0x0, 0x0) [ 81.273244][ T4049] free_unref_page+0x19/0x6a0 [ 81.277937][ T4049] __unfreeze_partials+0x17c/0x1a0 [ 81.283057][ T4049] qlist_free_all+0x6a/0x170 [ 81.287661][ T4049] kasan_quarantine_reduce+0x180/0x200 [ 81.293138][ T4049] __kasan_slab_alloc+0xa2/0xc0 [ 81.298001][ T4049] kmem_cache_alloc_lru+0x31a/0x720 [ 81.303213][ T4049] __d_alloc+0x32/0x960 [ 81.307381][ T4049] d_alloc+0x4a/0x230 [ 81.311370][ T4049] d_alloc_parallel+0xe7/0x1af0 [ 81.316230][ T4049] __lookup_slow+0x193/0x480 [ 81.320830][ T4049] lookup_one_len+0x16a/0x1a0 [ 81.325516][ T4049] start_creating.part.0+0x13a/0x290 [ 81.330819][ T4049] debugfs_create_dir+0x69/0x4d0 [ 81.335768][ T4049] ieee80211_debugfs_add_netdev+0x10a/0x1280 [ 81.341766][ T4049] ieee80211_if_change_type+0x2b9/0x840 [ 81.347338][ T4049] [ 81.349661][ T4049] Memory state around the buggy address: [ 81.355287][ T4049] ffff8880779c9200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.363354][ T4049] ffff8880779c9280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 09:39:33 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x50, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c00028005000100000000001c002280080003400000000008000177f2267a000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000002040)={0x20, 0x0, 0x0, 0x0, 0x0, "", [@nested={0xd, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @generic="db"]}]}, 0x20}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) [ 81.371423][ T4049] >ffff8880779c9300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.379483][ T4049] ^ [ 81.383816][ T4049] ffff8880779c9380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.391890][ T4049] ffff8880779c9400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 81.399957][ T4049] ================================================================== [ 81.428100][ T4049] Kernel panic - not syncing: panic_on_warn set ... [ 81.434708][ T4049] CPU: 0 PID: 4049 Comm: syz-executor.1 Not tainted 5.18.0-rc4-syzkaller-01289-gfa728505f3e7 #0 [ 81.445146][ T4049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.455210][ T4049] Call Trace: [ 81.458489][ T4049] [ 81.461419][ T4049] dump_stack_lvl+0xcd/0x134 [ 81.466017][ T4049] panic+0x2d7/0x636 [ 81.469924][ T4049] ? panic_print_sys_info.part.0+0x10b/0x10b [ 81.475925][ T4049] ? preempt_schedule_common+0x59/0xc0 [ 81.481406][ T4049] ? mini_qdisc_pair_swap+0x1b9/0x1f0 [ 81.486795][ T4049] ? preempt_schedule_thunk+0x16/0x18 [ 81.492187][ T4049] ? mini_qdisc_pair_swap+0x1b9/0x1f0 [ 81.497579][ T4049] end_report.part.0+0x3f/0x7c [ 81.502345][ T4049] kasan_report.cold+0x93/0x1c6 [ 81.507214][ T4049] ? mini_qdisc_pair_swap+0x1b9/0x1f0 [ 81.512610][ T4049] mini_qdisc_pair_swap+0x1b9/0x1f0 [ 81.517834][ T4049] ? ingress_init+0x1c0/0x1c0 [ 81.522531][ T4049] tcf_chain0_head_change.isra.0+0xb9/0x120 [ 81.528454][ T4049] tc_new_tfilter+0x1d5b/0x2200 [ 81.533332][ T4049] ? tc_del_tfilter+0x1680/0x1680 [ 81.538378][ T4049] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 81.544388][ T4049] ? kfree_skbmem+0xef/0x1b0 [ 81.549001][ T4049] ? kmem_cache_free+0xdd/0x5a0 [ 81.553895][ T4049] ? tc_del_tfilter+0x1680/0x1680 [ 81.558938][ T4049] rtnetlink_rcv_msg+0x946/0xc90 [ 81.563889][ T4049] ? rtnl_fdb_dump+0x9a0/0x9a0 [ 81.568666][ T4049] ? netdev_core_pick_tx+0x2e0/0x2e0 09:39:33 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x0) [ 81.573971][ T4049] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 81.580226][ T4049] ? ref_tracker_free+0x370/0x6b0 [ 81.585276][ T4049] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 81.590672][ T4049] netlink_rcv_skb+0x153/0x420 [ 81.595453][ T4049] ? rtnl_fdb_dump+0x9a0/0x9a0 [ 81.600241][ T4049] ? netlink_ack+0xa80/0xa80 [ 81.604850][ T4049] ? netlink_deliver_tap+0x1a2/0xc40 [ 81.610160][ T4049] ? netlink_deliver_tap+0x1b1/0xc40 [ 81.615468][ T4049] netlink_unicast+0x543/0x7f0 [ 81.620259][ T4049] ? netlink_attachskb+0x880/0x880 [ 81.625376][ T4049] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 81.631639][ T4049] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 81.637900][ T4049] ? __phys_addr_symbol+0x2c/0x70 [ 81.642947][ T4049] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 81.648685][ T4049] ? __check_object_size+0x16c/0x4f0 [ 81.653994][ T4049] netlink_sendmsg+0x917/0xe10 [ 81.658784][ T4049] ? netlink_unicast+0x7f0/0x7f0 [ 81.663739][ T4049] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 81.669996][ T4049] ? netlink_unicast+0x7f0/0x7f0 [ 81.674961][ T4049] sock_sendmsg+0xcf/0x120 [ 81.679401][ T4049] ____sys_sendmsg+0x334/0x810 [ 81.684283][ T4049] ? kernel_sendmsg+0x50/0x50 [ 81.688977][ T4049] ? do_recvmmsg+0x6d0/0x6d0 [ 81.693588][ T4049] ? __lock_acquire+0x163e/0x56c0 [ 81.698642][ T4049] ___sys_sendmsg+0xf3/0x170 [ 81.703249][ T4049] ? sendmsg_copy_msghdr+0x160/0x160 [ 81.708559][ T4049] ? find_held_lock+0x2d/0x110 [ 81.713347][ T4049] ? __might_fault+0xd1/0x170 [ 81.718048][ T4049] ? lock_downgrade+0x6e0/0x6e0 [ 81.722924][ T4049] __sys_sendmmsg+0x195/0x470 [ 81.727621][ T4049] ? __ia32_sys_sendmsg+0x220/0x220 [ 81.732839][ T4049] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 81.738857][ T4049] ? __context_tracking_exit+0xb8/0xe0 [ 81.744341][ T4049] ? lock_downgrade+0x6e0/0x6e0 [ 81.749216][ T4049] ? lock_downgrade+0x6e0/0x6e0 [ 81.754084][ T4049] ? restore_fpregs_from_fpstate+0xcc/0x1e0 [ 81.760009][ T4049] __x64_sys_sendmmsg+0x99/0x100 [ 81.764974][ T4049] ? syscall_enter_from_user_mode+0x21/0x70 [ 81.770895][ T4049] do_syscall_64+0x35/0xb0 [ 81.775345][ T4049] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 81.781278][ T4049] RIP: 0033:0x7f74138890e9 [ 81.785717][ T4049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 81.805347][ T4049] RSP: 002b:00007f7414955168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 81.813782][ T4049] RAX: ffffffffffffffda RBX: 00007f741399bf60 RCX: 00007f74138890e9 [ 81.821778][ T4049] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000006 [ 81.829765][ T4049] RBP: 00007f74138e308d R08: 0000000000000000 R09: 0000000000000000 [ 81.837752][ T4049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.845734][ T4049] R13: 00007ffd1e0d0abf R14: 00007f7414955300 R15: 0000000000022000 [ 81.852495][ T4084] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 81.862985][ T4049] [ 81.866694][ T4049] Kernel Offset: disabled [ 81.871018][ T4049] Rebooting in 86400 seconds..