dcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) [ 710.327511] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:54:50 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r5, &(0x7f00000012c0)="0d268a927f1b6588b93e480b41ba3860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd60da03059bcecc7a9544fa3a07e758044ab4ea6f7ae56d88fecf9141a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000040)={0x0, 0x2, 0x591}) 22:54:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x42609, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 710.534859] bridge982: port 1(vlan526) entered blocking state 22:54:50 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) [ 710.585490] bridge982: port 1(vlan526) entered disabled state [ 710.661026] device vlan526 entered promiscuous mode 22:54:51 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) [ 710.763321] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 710.914710] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 711.043553] bridge982: port 2(vlan527) entered blocking state [ 711.064532] bridge982: port 2(vlan527) entered disabled state [ 711.128064] device vlan527 entered promiscuous mode 22:54:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0xf0ffffffffffff}, 0x0) 22:54:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x4260a, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:54:51 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x140f, 0x100, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0xfffffffffffffcef}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 22:54:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r9, 0x63, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @void}}}, 0x28}, 0x25}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r9, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "55bcc16585"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "189b"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "bd8a896732b9c18e1c9224994a"}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x63, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}, 0x25}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 22:54:51 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x0) 22:54:51 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) sendto$inet(0xffffffffffffffff, &(0x7f0000001340)="3c000e483fdef698dd2e8ae0921c8f72ed3fb92ff8651c051115b608e580b89689beb6ffedef1a70eadec15194b78db935c77472909ddfdba7a277a4e39a2d09abd720df237be600840b225a50c7080f09c2b194bd84d83368ca8f7167e74bfd086fb247c087894b872c6afddf13307a540d291345897a488b1a3cd6892efc5579c0f38e22d32cc91670643a6d5a1a02992d52b47736c4d04b690cd65050226539781ecf09ebd52b864dc5d51db6e19c645de2d55f2de11eb9ed5b466f9e3380c8173c5410b0021e1347c5abad38dcf7af6fe88f177e5d433277d9b60ab01ecde0c680074072dce4f88d74fbc0bacc2c3c3b083982653c4f70057db3dd3b36ac9a999d06e36ec1eb7cb8adf53ab0df5109e8f15b7349e9b3509e28a34d7e5b3268ea3bcb09d4d8883b48ba9e237768af0aa184bffda76bd2adc33baaff1f70dd49f853da1750bc9bb2f6e86caf573dec2fc09d003795e59aaec9738eae1f0d26dfe27a9915ea226cf84c4043063d252cebe211e549a85f70384c899c817701be58eb718b2ac5463eb1aacd075edef1d4ac420163ad55258a494b80b6413e77816ebbdcd31f5210fe7d32f7ed2cd51ec31e2e05a65d857ff8f68299e4f2bb4d0bfe66d13a1596c839a4db9baf9248a4aac69e7825253e891b7928176e91633e86a653b9023d6d26551a6ec95f3ee11347b9545d518a813be86a6aa49eb057d41d8288799da42a72f64ee83b4564a824c5b0cfea205745a371e15f67105d42eef5123d350c92368b3fd2d71eae25a2c8c78852ae65f7cede6fc9696454b914cffa80e594d443c1c8db2830d61ad8ad36a99869f906cc93dbe79a0f704151452f79ec3d08dddf2d2ec3c939a906ab3e92fb65991172fe32ef3381af5526c3bfd4aeeaa2e1fed46419494ff99e1d530f303685cd5e022909a1eee1294fb1a28be79dabcd2124df9356a9966ba5d17e494d80431f509a57f78578c80da45fd578d32632d176c52de6d00724608079f72235a119277917c490de5453e0b225dd8e9d1e6bb92d9bf95107a08bde6385c8ac66d7b4f8083039013e71bf274519af61474cc0d824673d60acc236303fc25491f3397b655dd9ca86482be4aa2fabe39828eddced23fbd15a64b6b8a70a154839399e64facc4c8bef7abdb7ab8d295f436fa98e0859efd7d3b3d7fd3e65250e86400c36891e173a7f1139e1a6e4b3560f5ad0433670dd758d7e579f4705aaf130963861de997b26c8e17e62f1ddf7850670fae5a1651b46d7bb2b7b3b4d789d2c6ede4f6f61dfa63f36c70c8ba49d3cc4ec7a2ed9a87553e6a553e4c995fe09df78175d49ce59bac42e057209fa54f08c6f2d63bdb8658479647ec50950aa9dfaa4be0843b6c06d8d570853adfd01f0f8e18e8d8ab3a4dc0bce90fe21e81003cf634a606c1ddaf11edc50eb0b94a4c33f2dd49390cc278249ffbca3b71472efcd24667bc57e81ecbc58a245d014327da29df19f4da0736f93c0ec06805ac1f48742ee8c5513483a5b75deded0159c7986bfdff11efc0abab145942c810acb0a728b29fdeb5ae47012bc1d42a1dd167ce3a4c394af27c341ac7660221deb495c7ad50b9f2e57c82318fe60b6075762ecdf26a97696ea2bb2b108b35580a002994dcef94d94065ce925468495df90078c6d26efc3e344a5a16e1b5ef7e2a57d4b726e85e428e074082ecd3f63540ae643385864556626ad87e887f73f1c10a5938287d4c77430b79774ade52d1a2f146a71a88f61ea428b2486d6a602f1cb5110212e665cec8ddcae7ef9afb94ed38a9cea6d0e188291fc6e47c772bc91dd13ed11c071f4e32a231f08c2c8c94817e9eac2f45737f28bac68bcc37c03c5490b54b344b619196464034ee713cdb8a5385091a6ada8b9f00c9a42fb01bc4155dd48df5e74d8fa4e350bf92304bc719ab92d52bf4b01215397441dd5f24d816431a7701c1f29f289f14a89d85a0b51c9cee18568b2f8c329282287cfb707c11d9f9b267d8aa443e3751b2c6fbf5ee2a9ff4509f75c02a683dd309dfd44c3fb059f8dcd7a5c78e2fb7e24b3a7fd05dc96fb8ca543b2bb5406550287866c8768fffb16da70b943efe24c766867e9e91c1495ac037d6d752c8f778e52a028217b93cd40d850f8fec3c9e8ca5a4de332a68e0815fc9c5d400461e1c354d2de794e4cdc6a1402cb57e7dc4bc19c4d3a7cb6e6cd9f5d3f232fac48af9d838687d11af2b4e48e81fc9beeb2f839bfc5172a00c63a043642d141cdbe416fd1dee635b6c9a808b3dc071ac594e12a7692e70d51e6191d76b4f104a421d07f0bb5c7bbd0e48a8752b83b1180a33f549dbf1ac262b4e1d34462bb6cc965f9850a76deda6513bd562373f5070c0c63839866ad881c5d96265b066fa9a04d9d2760c19b4069aeb472d032f4485c8bf4f0edbb3fe6a011818231900f0c9fa63c2a9b13c91af025f37661b1e3e0121d296d01e73d74dfcaecdb3c84e7502d1a95fe7e1cbc6a891faee27bfcca027c89799cd4d73508b182203a66c714dc42686b57e6b945c6d723da7b8481808620786a109093353383359015c27958327d94633449948d578c5c7950263206986063e0234a69b4a2012e5d268c1de3e7de79d77f0f66c708f552d75b339d9ebdcea96cbf698198350940659375c2f489abc20229f2e94f79ea64d42bdde8a8d42fc841d941d37e0fd3bace4d7baaef2e9c2c0bfc181ac3df0c6e089517fb7cd5d12d68476d1e4497809d634efcd11caff719a6a67f9a22efddfaa67684cfde69f7d658964a657d0ddb23dc07311b33169bf4cf11c5e009c14ad1b9f29e51ba019591f0c503f51e1be3be0678df13aaa60a3b3fb13cb8eefe917f661259c7282a34a336c26d3e7b9f148964b7dad7fe71855aba1699199a310e5010edb5c340f7d7c18d1effe3be215cd3b080be363dd58d757af196fd1b9e327f4c6b867cbc4715ca0bcc9b337daa6b22097dce94a83327d7f233c3738a2f35ce6e3577851ca6b1c64432cdf3986e97fd68d3f791dda21faf6cc09147fae682e5ab7a964119dc65f7839e772c66065fb803316a0117551dde65c55fc8a59802889e5dce7845dde19566cbc12f44c4a646723ed7e93c4993129d3a265353fa6129a5172b03ece143d8441d3966a774d6f7171c2a75d4838bc856634b11204ef165aa2ebf6d2cb3badb496cd1dfa36b752ca5fe545abe83668e16fa3ce1d0842ea1152aecd41ab6b36ebed817ea410b5c27a5c118c971c978d1ca9683087ee44ec9fb34e9ce205bfc7a4ba7d2d8ff3a428fd3427ec4d0df9d13ec2832c9feaf47504a1231a21650f2b6e37bd8d471fb681e5b89ef6dcdea61aac88ae8589d06c91a058479989624bca173c70bf97c3bb25609d5fd8b615f0e1c1e2aec13b970927178ec557818fd1a89bffd54c67a7e1b12fb6ef3ee739770c92ccc330484f363d9092a64709977b9fd02b02e146ba6c65fae2b7bb1602357b814763189373a167da2a6dc75a70bf300d106bbbe895d3bc7bc1bd9208d98a34602360788df92d8aa22f404d34a044bcda19737ca20f409c0b326d8af9bc9e0c5d8628794bfafd97dc1bdf9d0308fb1cfd683188179502292ef12fc088412cf5a143e723ada1f05029e2a91f73368a0d06815fb01165a072ad02d501de5bc50cc8b1088db99490cfb82719438c566718dd9ef1d51e4e26e4dc82925db49218b32682034c7d2027acf31b5511798018d986c35c864f8b2902dd1df5c780a1c7e77b70de0a52a8a8cc343be983e8338219b3b1d0eab35164342f13722924ea573957b56fa7064adfe687e81eaaf3589627c95c800b0afef156c56d7be0ca4c14fab31c524b843a074359526b0975811ea9beae269caf7cf387e509a37b918c6bb60c0634db5a40b43e641535df3fcf38f27e479636e8e3f4bdcdc8df61c2867e3b1920160dc63227ca81d829f1e8d7c5e46909991cb5965f64cbc99a6351ac3a14e09fcd76c7bda79c7aa1b15e8eac7eb13784da41aaeb1161c1ec9a0667bbe31f634b4261c4f08c0b2598f9a7dd19f9899395df02b460e75b2fad6cc52bc2cf5888816d1eed513838377b4fe4091fc8f4a0a7f0b76d22e2a2091497ec2e010d3582ef03e4749467b8b62bbae7cd30696ca1f8ae6dfe06d1a5f05c282691e204c0dc46de60c5a7c668e5422d939e2405b5711532a6b6bcdcb59f16deeb89a97332a067e209eb7780a1af0d07055306162c3723cbfa1f4f6f67d0a93b211f7662e08c6d6f5223a8940b06ba61250b732507a5d152ac834c01e3e543541d18b6dbcbcf4177ee761f218540740fe9094e265e562c015cb8229812ad39834ff42e43572bcc222c9066fe298f2980e4e400dc37354c4ba61cab7a236e3843ba3808e0ded4a7fd584ad875b3911239cea6bc68cd38e6c7f471059c873d8313f3646b16570fbc0f1b0db208c376ff3a7fce26dfbcb0ca1974a3ef7a6739573bc82526156a3887dbae695d731c84b2241b12a80e13c6d2af154a150714bb8b3d8933924d222dba7658029ed699cd199fb48cf8fae25fce2becbefc8c92eb77afe225b6d73c378461bfd6ee69cfd0f428587ba272fa060cee2195047a6dbf94c487a71afd81ad053e2e92c81b93a3ba3d1354a18026926d5812a387ecc32e88e3860f52ac8cbd157858f7532289cbf3fe5775aeee95284f4c82dd7775e6f2bc64ca252e38d96ab8679596cf75f175184308c102c802055268c1a983eee33332a522614fb6d84d6a27a5f6c0d9ee38a4078379610b5f266adee64c4f86437c70840c5524e781ed4ee49e2698c01e5f5774fccb3a4f8f50a8d8c4a15d16c49d01629c1bf83bb04c7e40e1325b8bf508eab5ba64a3e75cef12d986997acf45091eb89bc705c7716f09446415d6203cadb5330a933d1bd0b7fcbd2ac8f9e9f63739decb774c418373bced094df724c41e2b6bb8f1eeab87e4383bced2c98062d468d0466978d805e909f152b5fccd20996a8c91b80087af7a4b732c25746e0bffdbe0cef569626c6d70de2dca69e0c2155c2c81ba15182da1ffcc3f05c418c1a0aaef87f0e8e19efd1a5927fa6e1924e3f9b1b7d03b5a600d26a286e5063746aaa039628f23f3547f64a48c6a4d9ef5ad9457a09596476ca99006baf208a4bf319cb1104a553ccaa0ae4945056dc4c6c78c598d4a7b734dadfeabacb0cebb7d57e297791b1e817b5b82d5792baf86a5fe2df646ace83f710c98245d8cbc7efa3d5c94fdc35572bbf4ec6b245f1f2e505732ed6f483fc2f05826fdb579a25d5dcfb1a89765b9841b9cc717cadcc1cd60f561a9ace256f8f24d8d3190f8b85e5e2b59f380ef1758e40fbfe6952c55d615150883f2fe678c9ed8881f4b77cd1178bbc6f3b023f532b559f0a375bb0c0e3b158f906dc7f04bc23a896d9d1a470cdc49c53e423881415fa203af931d6f93e9b5c8f36b2a73e2e79beb4bee3c74dbc8c9b87158d2ddcd07753b45454ef099eb00d7c39e040f5a95c1c78748145710bd7e812a66f34223048221e90e0e149270b33fe426cf28ea6519ed2126bc7b54b7832c468ebb8354ddf61594427c36b020959afb587be31086cdb4447f0d0a92b9d89350679663c07ceb244e1b1e569ab79e44d01e6ecea4a916c3c2b763e552aad0db3f32843fb1b04f4cb5245e49b0bcb544be73c1b548e4b4758bc917f3966a6257fdc5951e0745708e7e63ec74bd6748d1146834c66437f6e936700febaadf33dda44af8b5d8eba82cfc35119809bf3dfed196fd3fd5faa2071b6c7fa4f23574f44b17aa0", 0x1000, 0x0, &(0x7f00000001c0)={0x2, 0x4e21, @private=0xa010102}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x22) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'erspan0\x00', r9, 0x10, 0x40, 0x8, 0x6e, {{0xe, 0x4, 0x1, 0x0, 0x38, 0x68, 0x0, 0x40, 0x4, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@timestamp={0x44, 0x24, 0x6e, 0x0, 0x1, [0x9, 0x2, 0x132c, 0xac, 0x4f, 0x8001, 0x3, 0x4]}]}}}}}) [ 711.285431] validate_nla: 14 callbacks suppressed [ 711.285440] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:54:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x4260b, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 711.380454] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 711.493899] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 711.511436] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:54:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x4260c, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 711.601126] kauditd_printk_skb: 8 callbacks suppressed [ 711.601140] audit: type=1804 audit(1633647291.842:822): pid=22263 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir065698470/syzkaller.m8XkIq/1276/cgroup.controllers" dev="sda1" ino=14498 res=1 [ 711.711364] bridge985: port 1(vlan528) entered blocking state [ 711.734464] bridge985: port 1(vlan528) entered disabled state [ 711.774871] device vlan528 entered promiscuous mode [ 711.831065] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 22:54:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x4260d, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:54:52 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x3}, 0x0) [ 711.879504] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 711.886544] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 711.895472] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:54:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x100000000000000}, 0x0) 22:54:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x4c00, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 712.140807] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:54:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 22:54:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x4260e, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 712.203385] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:54:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100fcffffff000000002b00000008000300", @ANYRES32=r5, @ANYBLOB="0c009900ff0300003c0000001e001f00100018490500000000000001002000120000000004580000001f00000400518005003400560000000800220160020000"], 0x5c}}, 0x4008000) sendfile(r2, r1, 0x0, 0x100000002) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000e80)={0x1fd4, r3, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x70}}}}, [@NL80211_ATTR_TID_CONFIG={0x5e8, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xeb}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe6}]}, {0x314, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x300, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x5, 0x8}, {0x5, 0x7}, {0x4, 0x8}, {0x4, 0x7}, {0x6, 0x5}, {0x0, 0x4}, {0x0, 0x4}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6, 0x2, 0x16, 0xcbf8f2f5fe22b051, 0x1b, 0x1a, 0x0, 0xb]}]}, @NL80211_BAND_60GHZ={0xc4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x2, 0x3}, {0x0, 0x8}, {0x4, 0x3}, {0x3, 0x5}, {0x2, 0x3}, {0x5, 0x7}, {0x0, 0xa}, {0x4, 0x3}, {0x7}, {0x4, 0x5}, {0x7, 0x6}, {0x3, 0xa}, {0x6, 0x4}, {0x7, 0x5}, {}, {0x2}, {0x3, 0xa}, {0x5, 0x4}, {0x3, 0x6}, {0x7, 0x1}, {0x1, 0x5}, {0x3, 0x3}, {0x0, 0x7}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4800, 0x7fff, 0x3f, 0x6, 0x2, 0x1ff, 0x5, 0xf3b]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x2, 0x3}, {0x0, 0x5}, {0x7, 0x5}, {0x4, 0x6}, {0x6, 0x2}, {0x7, 0x2}, {0x5, 0x1}, {0x4, 0x3}, {0x6}, {0x0, 0x4}, {0x0, 0x2}, {0x1, 0x7}, {0x0, 0x9}, {0x0, 0x7}, {0x1, 0x6}, {0x2, 0x1}, {0x0, 0x5}, {0x1, 0x3}, {0x4, 0x5}, {0x4, 0x8}, {0x2, 0x6}, {0x5, 0x4}, {0x4, 0x9}, {0x4, 0x4}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0x9}, {0x4, 0xa}, {0x4, 0xa}, {0x7, 0x3}, {0x0, 0x1}, {0x7, 0x9}, {0x3, 0x8}, {0x7, 0x4}, {0x4, 0x5}, {}, {0x0, 0x7}, {0x0, 0x9}, {0x2, 0x1}, {0x6, 0x3}, {0x2, 0x1}, {0x1, 0x6}, {0x7, 0xa}, {0x6, 0x6}, {0x7, 0x7}, {0x4, 0x3}, {0x5, 0x6}, {0x0, 0x6}, {0x4, 0x2}, {0x5, 0x3}, {0x4, 0x3}, {0x4, 0x8}, {0x7}, {0x2, 0x5}, {0x3, 0x6}, {0x2, 0x8}, {0x1, 0x7}, {0x3, 0x4}, {0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0xa}, {0x5, 0xa}, {0x3, 0x7}, {0x3, 0xa}, {0x1, 0x1}, {0x0, 0x5}, {0x4, 0x7}, {0x0, 0x3}, {0x7, 0x5}, {0x4}, {0x6, 0x2}, {0x4}, {0x4}, {0x3, 0x7}, {0x4, 0x3}, {0x6}, {0x5, 0x8}, {0x0, 0x8}, {0x4, 0x3}, {0x2}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x2, 0x24, 0x6, 0x60, 0x6, 0x9, 0x2, 0x16, 0x2, 0x1b, 0x30, 0x30, 0x1b, 0x9, 0x48, 0x6, 0x6c, 0x16, 0x36, 0x60, 0x60, 0x2, 0x48, 0xb, 0x5, 0x12, 0x16, 0x6, 0x48, 0x4, 0x6, 0x36]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0x7}]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0xa7ee, 0x40, 0xe3f8, 0x3ff, 0x400, 0x4, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0x24, 0x36, 0x30, 0x4, 0x9, 0x24, 0x6c, 0x9, 0x6c, 0x1, 0x30, 0x34, 0x36, 0x0, 0x45]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x0, 0x100, 0x3, 0x7ff, 0x6cad, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xb, 0x4, 0x12, 0x16, 0x6c, 0x2, 0x7e, 0x36, 0x48, 0x1b, 0x6, 0x37, 0x15, 0x40]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0x2}, {0x3, 0x2}, {0x6, 0x8}, {0x4, 0x7}, {0x4, 0x9}, {0x6}, {0x0, 0x6}, {0x5, 0x6}, {0x7, 0x9}, {0x7, 0x5}, {0x1}, {0x3, 0x2}, {0x1, 0x7}, {0x0, 0x4}, {0x1, 0xa}, {0x7, 0xa}, {0x4, 0x8}, {0x6, 0x7}, {0x7, 0x1}, {0x1, 0x8}, {0x7, 0x8}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x0, 0xb, 0x36, 0x18, 0x24, 0x6c, 0x2, 0x48]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x0, 0x4, 0xc56f, 0x1, 0x7fff, 0xdb0, 0x848]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0x7}, {0x6, 0x6}, {0x5, 0x3}, {0x7}, {0x5, 0x5}, {0x1, 0x5}]}]}, @NL80211_BAND_60GHZ={0x104, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x51, 0x2, [{0x4, 0x5}, {0x4, 0x7}, {0x6, 0xa}, {0x1, 0x3}, {0x4, 0x9}, {0x2, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x6, 0x2}, {0x3, 0x6}, {0x1, 0x4}, {0x5, 0xa}, {0x6, 0xa}, {0x0, 0x7}, {0x3, 0x8}, {0x5}, {0x2, 0x5}, {0x1, 0x1}, {0x5, 0x8}, {0x1, 0x5}, {0x3, 0x1}, {0x3, 0x2}, {0x7, 0x1}, {0x6}, {0x0, 0x7}, {0x5, 0x6}, {0x4, 0x9}, {0x7, 0x6}, {0x2, 0x3}, {0x2, 0x7}, {0x4, 0x6}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x1}, {0x5, 0x4}, {0x7, 0x8}, {0x0, 0xa}, {0x1, 0x9}, {0x4, 0x3}, {0x2}, {0x1, 0xa}, {0x4, 0x7}, {0x4, 0x6}, {0x4, 0x6}, {0x1, 0x2}, {0x0, 0x5}, {0x1, 0x1}, {0x0, 0x2}, {0x3, 0x8}, {0x0, 0x3}, {0x1, 0x9}, {0x4, 0x9}, {0x2, 0x5}, {0x7, 0xa}, {0x4, 0x4}, {0x1, 0x1}, {0x4, 0x2}, {0x6, 0x5}, {0x7}, {0x0, 0x6}, {0x0, 0x1}, {0x7, 0x5}, {0x3, 0x1}, {0x2, 0x4}, {0x4, 0x3}, {0x5, 0x6}, {0x5, 0x7}, {0x1, 0x2}, {0x1, 0x6}, {0x7, 0x4}, {0x1, 0x7}, {0x2, 0x8}, {0x0, 0x2}, {0x1, 0x4}, {}, {0x4, 0x1}, {0x4, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xffff, 0x8, 0x2, 0x83a, 0x7, 0x5, 0x7]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1, 0xb3d92edac37954e9, 0x18, 0x5, 0x1, 0x60, 0x1b, 0x5]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x1, 0x6}, {0x2, 0x2}, {0x3, 0x6}, {0x1, 0xa}, {0x0, 0x6}, {0x3, 0x5}, {0x4, 0x5}, {0x2, 0x8}, {0x0, 0x1}, {0x4, 0x8}, {0x1, 0x5}, {0x1, 0x4}, {0x6, 0x5}, {0x4, 0x7}, {0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x391, 0x6, 0x1, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x24, 0x1, 0x3, 0x36, 0x2, 0xb, 0x12, 0x62, 0x48, 0x1, 0x60, 0x6c, 0x18, 0x7c, 0x12, 0x2, 0xc, 0x16, 0x24, 0x48, 0x12, 0x12, 0x6c, 0xc, 0x48, 0x18, 0x30]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1, 0x9, 0x6c, 0x30, 0x61, 0x36, 0x12, 0xb, 0x74, 0x3]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x1b, 0x9, 0x4, 0x5, 0x0, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x3ff, 0xce, 0x101, 0x5, 0xfc4e, 0x2]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0xa6ebe42282bdeed8, 0x48, 0x18, 0x1, 0x5, 0x9, 0x30, 0x36, 0xc, 0x48, 0xb, 0x2, 0x3, 0x5, 0xb, 0x18]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x30, 0x0, 0x16, 0x6, 0x24, 0x6, 0x18, 0x16, 0x3, 0x5, 0x0, 0x3, 0xc, 0x9, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x82}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x72}]}, {0x118, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1, 0x16, 0x6, 0x3, 0x6, 0x5, 0x48, 0x18, 0x4, 0x30, 0x6, 0x6, 0x6, 0x1b, 0xc, 0x9, 0x24, 0x2b, 0x2d, 0x48, 0xc, 0x4, 0x30, 0xc, 0x3, 0x3]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x0, 0x7}, {0x5, 0x7}, {0x3, 0x1}, {0x0, 0x3}, {0x7, 0xa}, {0x4, 0x2}, {0x1}, {0x3, 0x5}, {0x6}, {0x5, 0x3}, {0x2}, {0x4, 0x6}, {0x0, 0x4}, {0x4, 0x8}, {0x6, 0x7}, {0x0, 0x1}, {0x1, 0x8}, {0x6}, {0x0, 0x2}, {0x7, 0x6}, {0x0, 0x1}, {0x2, 0x9}, {0x2, 0x6}, {0x3, 0x8}, {0x4, 0x6}, {0x5, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x7, 0x4}, {0x3, 0x1}, {0x5}, {0x4, 0x7}, {0x6, 0x8}, {0x0, 0x5}, {0x7, 0x7}, {0x7}, {0x1, 0x1}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x8}, {0x0, 0x1}, {0x3, 0x3}, {0x4, 0x6}, {0x4, 0xa}, {0x1, 0x8}, {0x3}, {0x5, 0x7}, {0x0, 0x3}, {0x4, 0x3}, {0x5, 0x1}, {0x3, 0x3}, {0x4, 0x5}, {0x0, 0xa}, {0x6, 0x7}, {0x7, 0x9}, {0x6, 0x1}, {0x5, 0x4}, {0x0, 0x1}, {0x4, 0x6}, {0x5, 0x9}, {0x7}, {0x1, 0x9}, {0x7, 0x5}, {0x7}, {0x2, 0x8}, {0x2, 0x4}, {0x1, 0x7}, {0x3}, {0x7, 0x4}, {0x3, 0x3}, {0x6}, {0x5, 0x7}, {0x7, 0x6}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xc, 0x6, 0x1, 0xc, 0x12, 0x36, 0x1b, 0x5, 0x1, 0x2, 0x2, 0x24, 0x3, 0x9, 0x3, 0x6c, 0x24, 0x1, 0x36, 0x5, 0x5, 0x16, 0x30, 0x12, 0x69, 0x1b, 0xb, 0x6]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x4}, {0x3, 0xa}, {0x7, 0x7}, {0x1, 0x9}, {0x2, 0x5}, {0x7}, {0x5, 0x6}, {0x5, 0x1}, {0x0, 0x9}, {0x5, 0x9}, {0x1}, {0x0, 0x6}, {0x4, 0x3}, {0x3, 0x1}, {0x5, 0xa}, {0x5, 0x6}, {0x1, 0x3}, {0x6, 0x1}, {0x7, 0x3}, {0x1, 0x4}, {0x7, 0x4}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x1}, {0x3, 0x4}, {0x1, 0x3}]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x5}, {0x6, 0x6}, {0x3, 0x18}, {0x1, 0x2}, {0x1, 0x2}, {0x4, 0x1}, {0x5, 0x8}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3c40, 0x0, 0x1, 0xfff7, 0xffff, 0x7f, 0x7fff, 0x604]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x7ff, 0x0, 0xf2, 0x34, 0x6, 0x0, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xfc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x24, 0x4, 0x60, 0x36, 0x6, 0xea6c38ec13e2e10a, 0x2, 0xb, 0x36, 0x18, 0x1b, 0x7e, 0x1, 0x24, 0x1, 0x6, 0x6, 0x56, 0x18, 0x9, 0x18, 0x36, 0x42, 0x24, 0x0, 0x36, 0x30]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x24, 0x25, 0x24, 0x24, 0x6c, 0x1, 0x36, 0x16, 0xb, 0x6, 0x0, 0x6c, 0x48, 0xb, 0x48, 0x0, 0x9, 0x60, 0x1b, 0xb, 0x30, 0xb, 0x2, 0x6c]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x16, 0x3, 0x48, 0xc, 0x30, 0x4, 0x16, 0x12, 0x24, 0x19, 0x5, 0x16, 0xa4569f35e70c7bda, 0x1, 0x1b, 0x50, 0x3, 0x30, 0x1, 0x16, 0x6c, 0x2, 0x12, 0xb]}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x4, 0x7}, {0x6, 0xa}, {0x4, 0x5}, {0x3, 0x6}, {0x5}, {0x2, 0x4}, {0x1, 0x8}, {0x4, 0x6}, {0x7, 0x4}, {0x0, 0x5}, {0x1, 0xa}, {0x5, 0x8}, {0x1, 0x1}, {0x1, 0x5}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x7, 0x9}, {0x2, 0xa}, {0x1, 0x1}, {0x7, 0x5}, {0x2, 0x7}, {0x2}, {0x3, 0x9}, {0x4, 0x7}, {0x2, 0x1}, {0x1, 0x9}, {0x0, 0x4}, {0x2}, {0x1, 0x9}, {0x2, 0x8}, {0x3, 0x5}, {0x4, 0x8}, {0x0, 0x6}, {0x0, 0x5}, {0x0, 0x9}, {0x6, 0x2}, {0x6, 0x7}, {0x7, 0x4}, {0x6, 0x8}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x4, 0x4}, {0x5, 0x5}, {0x3, 0x9}, {0x5, 0x3}, {0x6, 0x8}, {0x1, 0x7}, {0x7, 0x1}, {0x1, 0x5}, {0x2, 0x7}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3ff, 0x2, 0x1, 0x6, 0x553a, 0x200, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0x6c, 0x2, 0x1b, 0x5, 0xb, 0x6c, 0x48, 0x1, 0x6c, 0x6, 0x9, 0xb, 0x12, 0x1b, 0x45, 0x24, 0x9, 0x1, 0x2, 0x60, 0x6, 0x6c, 0x4, 0x5, 0x22, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x7, 0x1000, 0x5, 0x3ff, 0x1000, 0x800]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdf}]}]}, @NL80211_ATTR_TID_CONFIG={0x7f8, 0x11d, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x50, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x48, 0x18, 0x1e, 0x30, 0x3, 0x18, 0xc, 0x24, 0xc, 0x16, 0x3, 0x16, 0x12, 0xb, 0x1, 0x1, 0x18, 0x60, 0xc, 0x18, 0x18, 0x5, 0xc, 0x24]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x2, 0x3}, {0x0, 0xa}, {0x7, 0x1}, {0x7, 0x6}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x9}, {0x4, 0xa}, {0x1, 0x3}, {0x3, 0x1}, {0x2, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x7, 0x400, 0x7, 0xd1, 0x7f, 0x8, 0xff]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaf}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7a}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x28}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x178, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x108, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1b, 0xc, 0xb, 0x0, 0x5, 0x48, 0x3, 0x24, 0x4, 0x6]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x10, 0x30, 0xc, 0x12, 0x6, 0x4, 0x16, 0x48, 0x12, 0x5, 0x75, 0x24, 0x4, 0xc, 0x12, 0x4, 0x48, 0x16, 0x60, 0xc, 0x48, 0x3, 0x18, 0xc]}]}, @NL80211_BAND_2GHZ={0xd4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x1, 0x6}, {0x6, 0x7}, {0x3, 0x7}, {0x1, 0x6}, {0x0, 0x6}, {0x4, 0x5}, {0x1, 0x4}, {0x1, 0x1}, {0x6, 0x4}, {0x2, 0x3}, {0x7, 0x2}, {0x4}, {0x0, 0x2}, {0x4, 0x9}, {0x7, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0xb, 0x6, 0x60, 0x18, 0x3, 0x1, 0x3, 0x18, 0x0, 0xc, 0x60, 0x6, 0x12, 0x4, 0x12, 0x30, 0x1b, 0x12, 0x16, 0x30, 0x18, 0x6, 0x1, 0x24, 0x1b, 0x9, 0x12, 0x16, 0x12, 0x18, 0x1]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x12, 0x24, 0x73322ecdfb8491f8, 0x36, 0x4, 0x16, 0x6, 0x36, 0xc, 0x48, 0x16, 0xb72ea86bbb412188, 0x6c, 0x4, 0xc, 0x8, 0x18, 0x6, 0x16, 0x6c16c82878a3aed6, 0x1b, 0x2, 0x18, 0x4, 0x48, 0x16, 0x6c, 0x16, 0x6, 0x30, 0x24]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x2, 0x24, 0x24, 0x24, 0x16, 0x6c, 0x1b, 0x48, 0x6, 0x9, 0xb, 0x48, 0x3, 0x1, 0x48, 0x24, 0x36, 0x60, 0x0, 0x16, 0x2, 0x6, 0x24, 0x6, 0x9, 0x30, 0x6, 0x16]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1, 0x3, 0x1b, 0x2, 0xf, 0x5339e0e1c3973cff, 0x12, 0x6c, 0x24, 0x0]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x9, 0xc, 0x12, 0x1b, 0x3, 0x2, 0xb, 0x9, 0x5, 0x16, 0x24, 0x12, 0x6, 0x5, 0xb, 0x3, 0x1]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x6, 0x5}, {0x1, 0xa}, {0x0, 0xa}, {0x1, 0xa}, {0x2, 0x4}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0x2}, {0x1, 0x5}, {0x1, 0x3}, {0x5, 0x3}, {0x7, 0x4}, {0x2, 0x7}, {0x7, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x9}, {0x7, 0x7}, {0x6, 0x9}, {0x5, 0x7}, {0x1, 0x8}, {0x1}, {0x7, 0x5}, {0x7, 0x6}, {0x0, 0x2}, {0x7, 0x6}, {0x1, 0x9}, {0x1, 0x1}, {0x7}, {0x4, 0x1}, {0x0, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x64, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0x18, 0x16, 0x6, 0x5, 0xb, 0x5, 0xb, 0x4, 0x2, 0x9, 0x12, 0x60, 0x36, 0x6, 0xb, 0x6, 0x2, 0x1b, 0x30, 0x60, 0x18, 0x36, 0x18, 0x12, 0x5, 0x35, 0x18, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x7, 0x1, 0x5a8, 0x3135, 0xffff, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x41fd, 0x6, 0x0, 0x3ff, 0xfff, 0xf7c1, 0x8d8, 0x11e2]}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x1, 0x8}, {0x1, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x2, 0x7}, {0x0, 0x1}, {0x1}, {0x1, 0x2}, {0x5, 0x2}, {0x1, 0x3}, {0x7, 0x5}, {0x5, 0x4}, {0x4, 0x2}, {0x5, 0x6}, {0x1, 0x9}, {0x2, 0x4}, {0x0, 0x5}, {0x4, 0x7}, {0x1, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x1, 0x9}, {0x2, 0x8}, {0x1, 0x7}, {0x6, 0x6}, {0x3, 0x5}, {0x0, 0xa}, {0x0, 0x9}, {0x2, 0xa}, {0x6, 0x5}, {0x6, 0x3}, {}, {0x4, 0x4}, {0x5, 0x5}, {0x2, 0x4}, {0x1, 0x4}, {0x3, 0x5}, {0x7}, {0x7, 0x5}, {0x4, 0x5}, {0x5, 0x1}, {0x0, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8001, 0xfff7, 0x5, 0x9, 0xfffd, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6c, 0x3, 0x6c, 0x4, 0x5f, 0xc, 0xc, 0x2, 0x9, 0x36, 0x12, 0xc, 0x1b, 0x6c]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x7, 0x2}, {0x4, 0x2}, {0x4, 0x9}, {0x1, 0x5}, {0x4, 0x4}, {0x2, 0x5}, {0x6, 0x1f}, {0x1, 0x7}, {0x2, 0x1}, {0x3, 0x3}, {0x3, 0xa}, {0x2, 0x7}, {0x7}, {0x3, 0x2}, {0x1, 0x7}, {0x0, 0x3}, {0x0, 0xa}, {0x2, 0x2}, {0x5, 0x6}, {0x0, 0x5}, {0x5, 0xa}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x8}, {0x1}, {0x2, 0xa}, {}, {0x0, 0xa}, {0x0, 0x9}, {0x7, 0x9}, {0x6, 0x6}, {0x4, 0xa}, {0x4, 0x6}, {0x6, 0x8}, {0x1}, {0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x9}, {0x4, 0x6}, {0x2, 0x3}, {0x1, 0x6}, {0x7, 0x9}, {0x3, 0x7}, {0x2, 0x8}, {0x6, 0x7}, {0x4, 0x2}, {0x3, 0x9}, {0x2, 0x3}, {0x2, 0x4}, {0x4, 0x6}, {0x0, 0x5}, {0x2}, {0x7, 0xa}, {0x3, 0xa}, {}, {0x5, 0x4}, {0x7, 0x4}, {0x6, 0x7}, {0x2, 0xa}, {0x5}, {0x5, 0x5}, {0x1, 0x5}, {0x0, 0xa}, {0x5}, {0x2, 0x9}, {0x3, 0xa}, {0x1, 0xa}, {0x0, 0x15}, {0x5, 0x3}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x5, 0x16, 0x16, 0x4, 0x4, 0xc, 0x16, 0xc, 0x4, 0x6, 0x6, 0x6c, 0x5, 0xc, 0x6c, 0x1b, 0x3, 0x60]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x3ed, 0x5, 0x803c, 0x6, 0x1]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x36, 0x5, 0x36, 0x9, 0x3, 0x16, 0x4, 0x16, 0x3, 0x1b, 0x18, 0x36, 0x48, 0x5, 0x1, 0x2e, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3f, 0x4, 0x9, 0x5, 0x6e9d, 0x810, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x59}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xaa}]}, {0x38c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000000}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2f0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x12, 0xb, 0x16, 0xc, 0x30, 0x60, 0x30, 0xc, 0x36]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0xa}, {0x6, 0x3}, {0x2, 0x6}, {0x6, 0x9}, {0x5}]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x2, 0x1}, {0x2, 0x1}, {0x7, 0x5}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0xa}, {0x4, 0xa}, {0x5, 0x2}, {0x5, 0x1}, {0x4, 0x9}, {0x5, 0x2}, {0x0, 0x5}, {0x5, 0x3}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x1}, {0x2, 0x9}, {0x6, 0x7}, {0x2, 0x1}, {0x4, 0x2}, {0x1, 0x6}, {0x7, 0x7}, {0x7, 0x3}, {0x1, 0x4}, {0x1, 0x8}, {0x4, 0x9}, {0x0, 0x6}, {0x2, 0x2}, {0x7, 0x2}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x7}, {0x1}, {0x2, 0x1}, {0x3, 0x7}, {0x6, 0x2}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x12, 0x4, 0x64, 0xb, 0x48, 0x48, 0x18, 0x18, 0x2, 0x60, 0x30, 0x18, 0x16, 0x24, 0x12, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6c, 0x6, 0x1, 0x6, 0x2, 0x9, 0x30, 0x6, 0x30, 0x6, 0x0, 0x48]}]}, @NL80211_BAND_60GHZ={0xf0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x9}, {0x1, 0xa}, {0x0, 0x2}, {0x3, 0x2}, {0x7, 0x6}, {0x6, 0x3}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x2, 0x6c, 0x4, 0x30, 0x4, 0x48, 0x3, 0x48, 0x16, 0x0, 0x36, 0x24, 0x6, 0x3, 0x48, 0x12, 0x1b, 0x48, 0x6c, 0xb, 0x3, 0x1, 0x3, 0x5, 0xc, 0x1b, 0x6, 0x30, 0x4, 0x16, 0x9c8e2124001732fa]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x3, 0x2}, {0x0, 0x6}, {0x0, 0x9}, {0x3, 0x5}, {0x4, 0x6}, {0x5, 0x4}, {0x5, 0x5}, {0x7, 0x5}, {0x7}, {0x5, 0x8}, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x7}, {0x6, 0x9}, {0x1, 0x6}, {0x0, 0x4}, {0x2, 0x5}, {0x0, 0xa}, {0x5, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0xb, 0x6c, 0x12, 0x48, 0x0, 0x36, 0x0, 0x18, 0x0, 0x2, 0x1, 0x18, 0x6, 0x4, 0x12, 0x36, 0x16, 0x18, 0x18, 0x2, 0x18, 0x30, 0x36, 0x5, 0xc, 0x6c]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x2, 0x8}, {0x5, 0x7}, {0x0, 0x9}, {0x1}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x4}, {0x0, 0xa}, {0x2, 0x7}, {0x7, 0x9}, {0x2, 0x8}, {0x2, 0x9}, {0x0, 0x6}, {0x3, 0x5}, {0x1, 0x3}, {}, {0x1, 0x9}, {0x0, 0x4}, {0x7, 0xa}, {0x6, 0x7}, {0x6, 0x3}, {0x7, 0x8}, {0x3, 0x7}, {0x3, 0x2}, {0x1, 0x2}, {0x4, 0x2}, {0x0, 0x1}, {0x0, 0x2}, {0x3, 0x2}, {0x2, 0x2}, {0x0, 0x7}, {0x3, 0x5}, {0x7, 0x6}, {0x2, 0x5}, {0x0, 0x5}, {0x1, 0x5}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x5, 0x4}, {0x1, 0x3}, {0x6, 0xa}, {0x1, 0x4}, {0x0, 0x1}, {0x6, 0x9}, {0x7, 0x8}, {0x0, 0x6}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x2}, {0x1, 0x1}, {0x5, 0x8}, {0x4, 0x6}, {0x3, 0x7}, {0x1, 0x5}, {0x7, 0x7}, {0x1}, {0x6, 0x2}, {0x0, 0x2}, {0x0, 0x9}, {0x7, 0x5}, {0x1, 0xa}, {0x2, 0x6}, {0x4, 0x1}, {0x1, 0x9}, {0x5, 0x4}, {0x1, 0x5}, {0x4, 0xa}, {0x5, 0x6}, {0x6, 0xa}, {0x2, 0xa}, {0x7, 0x2}, {0x0, 0x8}, {0x2, 0x8}, {0x2, 0xa}, {0x0, 0x7}, {0x5, 0x8}, {0x1, 0x5}, {0x3}, {0x2}, {0x6, 0xa}, {0x2, 0x7}, {0x0, 0x8}, {0x5, 0x9}, {0x0, 0x5}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0x2}, {0x6, 0x2}, {0x0, 0xa}, {0x6, 0x1}, {0x6, 0x2}, {0x1, 0x2}, {0x1}, {0x7, 0x6}, {0x6, 0x2}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x7}, {0x3, 0x6}, {0x2, 0x1}, {0x7, 0x1}, {0x1, 0x5}, {0x5, 0x5}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x18, 0x3, 0x24, 0x1b, 0x12, 0x6c, 0x5, 0x1, 0x1b, 0x16, 0x5, 0x9, 0x12, 0x8, 0x1, 0x48, 0x1, 0x9, 0x12, 0x12, 0x1, 0x48, 0x12, 0x16, 0x6c, 0x2, 0x6c, 0x9, 0x48, 0x2, 0x36, 0x24]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x9}, {}, {0x1, 0x5}, {0x5, 0x2}, {0x0, 0x8}, {0x7, 0x7}, {0x2, 0x2}, {0x1, 0x9}, {0x1, 0x6}, {0x7, 0x5}, {0x3, 0x2}, {0x4, 0x7}, {0x7, 0x7}, {0x5}, {0x6, 0x4}, {0x1, 0x9}, {0x1, 0x6}, {0x7, 0x1}, {0x2, 0x9}, {0x6, 0x6}, {0x1, 0x1}, {0x4, 0x4}, {0x0, 0x6}, {0x7, 0x4}, {0x0, 0x7}, {0x6, 0x3}, {0x6, 0x3}, {0x7, 0x9}, {0x0, 0x5}, {0x6, 0x6}, {0x6, 0x1}, {0x1, 0x1}, {0x2, 0x4}]}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x7, 0x1}, {0x0, 0x7}, {0x3, 0x3}, {0x1, 0x6}, {0x1, 0x6}, {0x7, 0xa}, {0x6, 0x7}, {0x1}, {0x5, 0x6}, {0x6, 0x4}, {0x5, 0x3}, {0x5, 0x9}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x2}, {0x7, 0x8}, {0x5, 0x9}, {0x2, 0x5}, {0x4, 0x2}, {0x7, 0x1}, {0x7, 0x8}, {0x5, 0x9}, {0x5, 0x2}, {0x1, 0x7}, {0x3, 0x2}, {0x2, 0x5}, {0x1}, {0x1, 0x2}, {0x5, 0x8}, {0x6, 0x3}, {0x1, 0x1}, {0x1, 0xa}, {0x4, 0x3}, {0x4, 0x4}, {0x4, 0x5}, {0x6, 0x6}, {0x5, 0xa}, {}, {0x1, 0x6}, {0x7, 0x9}, {0x7, 0x3}, {0x0, 0x5}, {0x5, 0x1}, {0x4}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x0, 0x6}, {0x5, 0x5}, {0x1, 0x5}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x1, 0x9}, {0x3, 0x6}, {0x5, 0x5}, {0x6, 0x6}, {0x6, 0x4}, {0x6, 0x5}, {0x1, 0x4}, {0x0, 0x2}, {0x0, 0x3}, {0x4, 0x2}, {0x7, 0x8}, {0x7, 0x4}, {0x4}, {0x4, 0x6}, {0x2, 0x8}, {0x2, 0x2}, {0x4, 0x9}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x0, 0x12, 0x2, 0x9, 0xc, 0x3, 0x24, 0x4, 0x5e, 0xc, 0x9, 0x48, 0x24, 0x1b, 0x4, 0x30, 0x1, 0x1b, 0xb, 0x5, 0x18, 0x2, 0x32, 0x3, 0x6, 0x3, 0x24, 0x0, 0x9, 0x24, 0x16, 0x16]}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x5, 0x24e7, 0x1c8, 0x5, 0xc13b, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x48, 0xb, 0x8, 0x3, 0x6, 0x6, 0x3]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x9}, {0x1, 0x7}, {0x1, 0x8}, {0x1, 0x6}, {}, {0x0, 0x7}, {0x2, 0x7}, {0x0, 0x8}, {0x5, 0x2}, {0x1, 0x4}, {0x2}, {0x3}, {0x2, 0x3}, {0x0, 0x3}, {0x3}, {0x7, 0x7}, {0x4, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x8}, {0x4, 0x3}, {0x5, 0x6}, {0x0, 0xa}, {0x0, 0x7}, {0x4, 0x5}, {0x2}, {0x7, 0x3}, {0x2, 0x3}, {0x1, 0x7}, {0x1}, {0x2, 0xa}, {0x0, 0x1}, {0x6, 0x6}, {0x2, 0x5}, {0x2}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x7}, {0x4, 0x6}, {0x7, 0x3}, {0x1, 0x8}, {0x5, 0x9}, {0x2, 0x1}, {0x7, 0x1}, {0x1, 0x2}, {0x3}, {0x4, 0xa}, {}, {0x3, 0x1}, {0x5, 0x7}, {0x0, 0x6}, {0x1}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x9}, {0x4}, {0x7, 0x2}, {0x5, 0x3}, {0x5, 0x2}, {0x3, 0x4}, {0x4, 0x3}, {0x5, 0x5}, {0x4, 0x8}, {0x5, 0x7}, {0x7, 0x6}, {0x5, 0x8}, {0x3}, {0x5}, {0x7, 0x9}, {0x1, 0x9}, {0x6, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x6c, 0x48, 0x1, 0x60, 0x5, 0x16, 0x16, 0x4, 0x1, 0xc, 0x0, 0x42, 0x4, 0x16, 0x1, 0x6, 0x6c, 0x17, 0x5, 0x1c, 0x30, 0x6, 0x0, 0x36]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x18, 0x36, 0x18, 0x6, 0x50, 0x30, 0x1b]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x12, 0xb, 0x6]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0x9}, {0x4, 0x3}, {0x4, 0x7}, {0x2, 0x6}, {0x7, 0x5}, {0x6, 0x8}, {0x7, 0x3}, {0x3, 0x5}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x1}, {0x5, 0x8}, {0x4}, {0x2, 0xa}, {0x5, 0x8}, {0x1}, {0x2, 0x1}, {0x7, 0x3}, {0x1, 0x4}, {0x0, 0x7}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x6}, {0x4, 0x8}, {0x6, 0x7}, {0x6, 0x9}, {0x5, 0xa}, {0x4, 0x3}, {0x1, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x1, 0x6}, {0x7, 0x1}, {0x7}, {0x7}, {0x7, 0x2}, {0x0, 0x3}, {0x1, 0x4}, {0x2, 0x7}, {0x4, 0x9}, {0x7, 0x2}, {0x6, 0x1}, {0x4, 0x4}, {0x0, 0x7}, {0x2, 0x5}, {}, {0x4, 0xa}, {0x6, 0x7}, {0x2, 0xa}, {0x6, 0xa}, {0x0, 0xa}, {0x2, 0x2}, {0x2}, {0x0, 0x6}, {0x5, 0x5}]}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x38, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6, 0x7e, 0x60, 0x0, 0x16, 0x12, 0x9, 0xa, 0x12, 0x1, 0x30, 0x48, 0x48, 0x1b, 0x6, 0x36, 0x0]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x5, 0x7}, {0x4}, {0x0, 0x4}, {0x1, 0x6}, {0x7, 0x7}, {0x4, 0x5}, {0x3, 0x6}, {0x6, 0xa}, {0x0, 0x5}, {0x1, 0x6}, {0x4, 0x7}, {0x1, 0x7}, {0x0, 0x5}, {0x3, 0x3}, {0x7, 0x6}, {0x6}, {0x2, 0x8}, {0x1, 0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x56, 0x6, 0x5, 0x30, 0xc]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1ff, 0x311c, 0x1000, 0x6, 0x8, 0x100, 0x3ff]}}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x1, 0x4}, {0x6, 0x1}]}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xae}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}]}]}, @NL80211_ATTR_TID_CONFIG={0x3ec, 0x11d, 0x0, 0x1, [{0x344, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x2, 0x80, 0x100, 0xfff, 0x5, 0x8, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x6, 0xa}, {0x2, 0x2}, {0x2, 0x1}, {0x7, 0x3}, {0x2, 0x2}, {0x4, 0x7}, {0x3, 0x6}, {0x6, 0x2}, {0x2, 0x1}, {0x7, 0xa}, {0x4, 0x9}, {0x3, 0x7}, {0x0, 0x2}, {0x7, 0x2}, {}, {0x0, 0x2}, {0x3, 0x4}, {0x4, 0x1}, {0x5, 0x8}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0x4}, {0x0, 0xa}, {0x6, 0x9}, {0x2}, {0x5, 0xa}, {0x1, 0x9}, {0x2, 0x9}, {0x5, 0x3}, {0x4, 0x5}, {0x7, 0x6}, {0x6}, {0x6, 0x5}, {0x0, 0x8}, {0x2, 0x5}, {0x0, 0x8}, {0x5, 0x8}, {0x0, 0x2}, {0x2, 0x8}, {0x2, 0x1}, {0x1, 0x2}, {0x3, 0x6}, {0x1, 0x9}, {0x7, 0xa}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0xa}, {0x7, 0x6}, {0x2, 0x7}, {0x3, 0x7}, {0x7, 0x4}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x7, 0x4}, {0x5, 0x5}, {0x2, 0x4}, {0x0, 0x1}, {0x0, 0xa}, {0x5, 0x1}, {0x6, 0x2}, {0x4, 0x8}, {0x0, 0x1}, {0x7, 0x3}, {0x7, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x2, 0x1759, 0x8, 0x3, 0xf000, 0x5]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x0, 0x4}, {0x0, 0x2}, {0x7, 0xa}]}]}, @NL80211_BAND_60GHZ={0xd0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x4, 0x7, 0x6, 0x7, 0x0, 0x101]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x7}, {0x7, 0x2}, {0x0, 0x2}, {0x0, 0xa}, {0x2, 0x1}, {0x4, 0x5}, {0x4, 0x9}, {0x0, 0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x6}, {0x3, 0x1}, {0x1, 0x7}, {0x1}, {0x2, 0x9}, {0x0, 0x4}, {0x2, 0x6}, {0x2}, {0x0, 0x8}, {0x7, 0x2}, {0x2, 0x2}, {0x2, 0x7}, {0x6}, {0x1, 0x3}, {0x5, 0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x3}, {0x5, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x4, 0x3}, {0x0, 0x9}, {0x7, 0x7}, {0x2, 0x7}, {0x0, 0x4}, {0x6, 0x7}, {0x5, 0x3}, {0x6, 0x3}, {0x4, 0x5}, {0x6, 0xa}, {0x3, 0x1}, {0x1, 0x7}, {0x0, 0x6}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x7}, {0x7, 0x2}, {0x3, 0x5}, {0x3, 0x7}, {}, {0x5, 0xa}, {0x2, 0x5}, {0x7, 0x9}, {0x1, 0x4}, {0x2}, {0x1, 0x3}, {0x3, 0x4}, {0x7, 0x9}, {0x3, 0x5}, {0x5, 0x5}, {0x4, 0x3}, {0x0, 0x2}, {0x0, 0xa}, {0x7, 0x4}, {0x7}, {0x7, 0x5}, {0x4, 0x1}, {0x1, 0xa}, {0x1, 0x8}, {0x4, 0x9}]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x0, 0x6}, {0x0, 0x3}, {0x0, 0x5}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x2}, {0x7}, {0x5, 0x1}, {0x6, 0x2}, {0x1, 0x2}, {0x1, 0xa}, {0x7}, {0x2}, {0x3, 0x9}, {0x0, 0xa}, {0x3}, {0x2, 0x5}, {0x3, 0x4}, {0x7, 0x8}, {0x2, 0x9}, {0x2}, {0x7, 0x1}, {0x0, 0x2}, {0x5, 0x5}, {0x1, 0x6}, {0x2, 0x8}, {0x1, 0x9}, {}, {0x4, 0x8}, {0x4, 0x9}, {0x0, 0x4}, {0x7, 0xa}, {0x1}, {0x1, 0x9}, {0x7, 0x4}, {0x3, 0x6}, {0x4, 0x6}, {0x1, 0x5}, {0x4, 0x9}, {0x5, 0x3}, {0x2, 0x7}, {0x5, 0x2}, {0x1, 0x8}, {0x2, 0x1}, {0x6, 0x2}, {0x2, 0x7}, {0x3, 0x9}, {0x3, 0x6}, {0x3, 0x3}, {0x4, 0x6}, {0x4}, {0x1, 0x1}, {}, {0x5, 0x4}, {0x2, 0x5}, {0x4, 0xa}, {0x0, 0x7}, {0x2, 0x8}, {0x2, 0x3}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0xa}, {0x3, 0xa}, {0x7, 0x1}, {0x6, 0x4}, {0x4, 0x2}, {0x6, 0x7}]}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x81, 0x4, 0xc6bc, 0x655, 0x401, 0x11b, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1000, 0x7, 0x800, 0x1, 0x1010, 0x1, 0x7b6e]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x84, 0x4, 0xf801, 0x7, 0x1, 0x9, 0xa00, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x158, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x3, 0xa}, {0x1, 0x6}, {0x5, 0x5}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0xa}, {0x0, 0x5}, {0x7, 0x2}, {0x0, 0xa}, {0x3, 0x3}, {0x7, 0x4}, {0x0, 0x4}, {0x5, 0xa}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0x3}, {0x4, 0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x7, 0x4}, {0x1, 0x2}, {0x1, 0x6}, {0x7, 0x3}, {0x4, 0x4}, {0x1, 0x5}, {}, {0x2, 0x7}, {0x7, 0x8}, {0x7, 0x4}, {0x1, 0x8}, {0x5, 0xa}, {0x0, 0x1}, {0x6, 0x5}, {0x6, 0x9}, {0x6, 0x2}, {0x0, 0x5}, {0x3, 0x1}, {}, {0x6, 0x7}, {0x2, 0x5}, {0x2, 0x1}, {0x2, 0x2}, {0x5, 0x6}, {0x0, 0x2}, {0x7, 0xa}, {0x4, 0xa}, {0x4, 0x8}, {0x4}, {0x2, 0x7}, {0x0, 0x1}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x7, 0x5}, {0x2, 0xa}, {0x5, 0x6}, {0x1}, {0x5, 0x5}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x8}, {0x1, 0x4}, {0x2, 0x2}, {0x6, 0x2}, {0x6, 0x2}, {0x0, 0x6}, {0x2, 0x4}, {0x2}, {0x5, 0x4}, {0x1, 0x4}, {0x7, 0xa}, {0x3, 0x2}, {0x4, 0x2}, {0x1, 0x4}, {0x6}, {0x4, 0x3}, {0x5, 0x4}, {0x5, 0x8}, {0x6, 0x4}, {0x1, 0x5}, {0x3, 0xa}, {0x6, 0x9}, {0x0, 0x4}, {0x4, 0x6}, {0x4, 0x9}, {0x2, 0xa}, {0x0, 0x9}, {0x6, 0x8}, {0x7, 0x5}, {0x0, 0x1}, {0x7, 0x3}, {0x4, 0x1}, {0x2, 0x9}, {0x0, 0x9}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x4, 0x24, 0x4, 0x2, 0x4, 0x16, 0xb, 0x24, 0x48, 0x2, 0xc, 0x60, 0x5, 0x6, 0x60, 0xb, 0x30, 0xc, 0x1b, 0x24, 0x16, 0x2, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x0, 0x6, 0x800, 0x2, 0x296, 0x8, 0x80]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x3, 0x7}, {0x1}, {0x0, 0x8}]}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x1, 0x2}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x1}, {0x3, 0x2}, {0x0, 0xa}, {0x7, 0x3}, {0x6, 0x2}, {0x0, 0xa}, {0x6, 0x2}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0xa}, {0x1, 0x3}, {0x2, 0xa}, {0x4, 0x4}, {0x0, 0x6}, {0x1, 0x5}, {0x3, 0x3}, {0x0, 0x9}, {0x0, 0x9}, {0x3, 0x4}, {0x7, 0x8}, {0x7}, {0x6, 0x5}, {0x0, 0x7}, {0x3, 0xa}, {0x1, 0x7}, {0x5, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x7, 0x3779, 0x101, 0x50b1, 0x977e, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x40, 0x3f, 0x8, 0x7, 0x3, 0x7fff]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x7}, {0x1, 0x6}, {0x4, 0x4}, {0x7, 0x2}, {0x0, 0x2}, {0x1, 0x5}, {0x3, 0x7}, {0x2, 0x1}, {0x1, 0x8}, {0x4, 0x3}, {0x1, 0x3}, {0x2, 0x8}, {0x3, 0xa}, {0x2, 0x4}, {0x3, 0x3}, {0x2, 0x4}, {0x2, 0xa}, {0x2, 0xa}, {0x3, 0x4}, {0x3, 0xa}, {0x0, 0x3}, {0x3, 0x6}, {0x2, 0x1}, {0x6}, {0x1, 0x6}, {0x7, 0xa}, {0x3, 0x1}, {0x3, 0x8}, {0x0, 0x2}, {0x1, 0x7}, {0x0, 0x1}, {0x5, 0x4}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x7}, {0x0, 0x5}, {0x0, 0x7}, {0x1, 0x3}, {0x1, 0x3}, {0x6, 0x9}, {0x1, 0x9}, {0x5, 0x2}, {0x2, 0x6}, {0x4, 0x4}, {0x7, 0x3}, {0x6, 0x6}, {0x1, 0x4}, {0x0, 0xa}, {0x7, 0x8}, {0x2, 0xa}, {0x2, 0x7}, {0x4, 0x1}, {0x1, 0x8}, {0x1, 0xa}, {0x4}, {0x5, 0x9}, {0x7, 0x5}, {0x4, 0x6}, {0x4, 0x3}, {0x6}, {0x2, 0x9}, {0x2, 0x1}, {0x5, 0x8}, {0x7, 0x4}, {0x0, 0x4}, {0x5, 0x5}, {0x4, 0x7}, {0x5, 0x2}, {0x1, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80000000}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10000}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x9c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x3}, {0x6, 0x6}, {}, {0x7, 0x1}, {0x0, 0x3}, {0x0, 0x2}, {0x5, 0x8}, {0x2, 0x3}, {0x6, 0x2}, {0x0, 0xa}, {0x6, 0x4}, {0x4, 0x8}, {0x5, 0x2}, {0x5, 0xa}, {0x6, 0x1}, {0x0, 0x8}, {0x1, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x24, 0x24, 0x3, 0x4, 0x5, 0x4, 0x4, 0x18, 0x2, 0x1b, 0x60, 0x1b, 0x3, 0x48, 0x3, 0xb, 0x36, 0x16, 0xc, 0xb, 0x4, 0x6, 0x2b, 0x1b, 0x21, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x8001, 0x5, 0x80, 0x6, 0x6, 0x4, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x12, 0x36, 0x1b, 0x36, 0x18, 0x1b, 0x9, 0x36, 0x60, 0x48, 0xc, 0x48, 0x4, 0x1b, 0x55, 0x30, 0x12, 0x48, 0x16, 0x36, 0x36, 0x1b, 0x1b, 0x3, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x9, 0x1, 0x0, 0x6, 0x17e]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x64, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xd80, 0x11d, 0x0, 0x1, [{0x11c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xfc, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb2, 0x3ff, 0x8, 0x98, 0x9, 0x1, 0x2, 0x1]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0xb, 0x0, 0x2, 0x16, 0x36, 0x60, 0x1, 0x6, 0x12, 0x18, 0x24, 0x24]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0x30, 0xb, 0x48, 0x60, 0x5, 0x60, 0x30, 0x18, 0x5, 0x9, 0x17, 0x60, 0x48, 0x60, 0x12, 0x12, 0x5, 0x30, 0x1, 0xb, 0x2, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x6, 0xa}, {0x7, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x9, 0x48, 0x8, 0x0, 0x30, 0x30, 0x4, 0xc, 0x48, 0xb, 0x48, 0x24, 0x18, 0x4, 0x2, 0x16, 0x60, 0x2, 0x9, 0xc, 0xb, 0x3, 0x4, 0x6, 0x3f, 0x60, 0x12, 0x18, 0x18, 0xb]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6c, 0xc, 0x6b, 0x12, 0x18, 0x1, 0x30, 0x5, 0x48, 0x4, 0x48, 0x18, 0x4, 0x18, 0x2, 0x9, 0x6c, 0x3, 0xc, 0xc, 0x16, 0x4, 0x2, 0x1b, 0x1b, 0x36, 0x18, 0x24, 0x48, 0xb, 0x30, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0xff7f, 0xe, 0x8, 0x1ff, 0x100, 0x3]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x7, 0x9}, {0x3, 0x6}, {0x1, 0x4}, {0x7}, {0x1, 0x8}, {0x2, 0x6}, {0x0, 0x2}, {0x2, 0x2}, {0x5}, {0x7, 0x9}, {0x7, 0x3}, {0x2, 0x6}, {0x2, 0x1}, {0x1, 0x7}, {0x4, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x9, 0x2, 0x16, 0x72, 0x36, 0xc, 0x9, 0x1b, 0x30, 0x3, 0x6, 0x6, 0x3, 0x6, 0x1b, 0x1, 0x6, 0x3, 0x4, 0x24, 0x1b, 0x24, 0x30, 0x6, 0x2, 0x1, 0x5]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1ff}]}, {0x53c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xd4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x0, 0xa}, {0x1, 0x6}, {0x3}, {0x7, 0xa}, {0x4, 0x7}, {0x3, 0xa}, {0x0, 0x3}, {0x2, 0x9}, {0x6, 0x7}, {0x7, 0x1}, {0x1, 0x4}, {0x3, 0x9}, {0x0, 0x8}, {0x4, 0x5}, {0x1, 0x5}, {0x1, 0x4}, {0x2, 0x6}, {0x0, 0x8}, {0x6, 0x1}, {0x7}, {0x6, 0x4}, {0x4, 0x6}, {0x1, 0x4}, {0x3, 0x9}, {0x2, 0x5}, {0x4, 0x3}, {0x0, 0x8}, {0x1, 0x2}, {0x1, 0x4}, {0x7, 0x5}, {0x4, 0x5}, {0x3, 0x5}, {0x7, 0x4}, {0x6, 0x2}, {0x4, 0x4}, {0x6, 0x3}, {0x6, 0x9}, {0x4, 0x1e}, {0x7, 0xa}, {0x6, 0xa}, {0x2, 0x1}, {0x6, 0x1}, {0x5, 0xa}, {0x7, 0x4}, {0x1, 0x5}, {0x1}, {0x7, 0x5}, {0x6, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x2, 0x8}, {0x6, 0xa}, {0x1, 0x1}, {0x3, 0xa}, {0x1, 0x7}, {0x7, 0x8}, {0x3, 0xa}, {0x0, 0x8}, {0x1}, {0x0, 0x4}, {0x3, 0xa}, {0x6, 0x4}, {0x2, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x9, 0x28, 0x1, 0x7, 0x9, 0x8, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xcc, 0x0, 0x1000, 0x6, 0x800, 0x9, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x0, 0x3e, 0x3, 0x9eb8, 0x88c, 0x429, 0x7]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x48, 0x11, 0x3, 0x24, 0x3, 0x1, 0x48, 0x12, 0x3, 0x4, 0x6, 0xc, 0xb, 0x12, 0x5, 0x3, 0x1b, 0x1b, 0x60, 0x6c, 0x5, 0x3, 0x30, 0x16, 0xc, 0x4, 0x5, 0x18]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x9, 0x24, 0x12, 0x60, 0x12, 0x1, 0x48, 0x18, 0x9, 0x30, 0x16, 0x48, 0x36, 0x24, 0x1b, 0x2, 0x24, 0x24, 0x5, 0x950f0fa232aa189b, 0x6, 0x30, 0x2, 0x2, 0xb, 0x36, 0x1, 0xb, 0x18, 0x4, 0x2]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x33c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x114, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x2}, {0x7, 0x9}, {0x6, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2, 0x8}, {0x2, 0x7}, {0x3, 0x4}, {0x2, 0x5}, {0x2, 0xa}, {0x3}, {0x0, 0xa}, {0x0, 0x8}, {0x2, 0xa}, {0x5, 0x8}, {0x5, 0x3}, {0x0, 0x2}, {0x2, 0x2}, {0x3, 0x4}, {0x5, 0x1}, {0x6}, {0x4, 0x5}, {0x5, 0x5}, {0x7, 0x3}, {0x5, 0x7}, {0x3, 0x9}, {0x3, 0x8}, {0x1, 0xa}, {0x5, 0x5}, {0x2, 0x8}, {0x3, 0x4}, {0x4}, {0x1, 0xa}, {0x1, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6, 0x30, 0x48, 0x12, 0x16, 0x6c, 0x3, 0x6, 0x36, 0x3, 0x1b, 0xc, 0x16, 0x36, 0x30, 0x2, 0x2, 0x1, 0xc, 0x1b]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0xb, 0x18, 0xb, 0x12, 0x18, 0x18, 0x24, 0xc, 0x12, 0x2]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x1, 0x4}, {0x7, 0x4}, {0x1}, {0x3, 0x9}, {0x7, 0x8}, {0x2, 0x4}, {}, {0x2, 0x6}, {0x6, 0x2}, {0x0, 0x6}, {0x1, 0x7}, {0x6, 0x9}, {0x1, 0x8}, {0x4, 0x2}, {0x6, 0x6}, {0x7, 0x3}, {0x2, 0x9}, {0x7, 0x5}, {0x6, 0x6}, {0x0, 0x9}, {0x6, 0x8}, {0x6, 0x4}, {0x7, 0x4}, {0x3, 0x9}, {0x4, 0xa}, {0x0, 0x3}, {0x1, 0x4}, {0x7, 0x4}, {0x1, 0x9}, {0x3, 0x7}, {0x3}, {0x0, 0x3}, {0x2, 0x2}, {0x1, 0x2}, {0x0, 0x6}, {0x2, 0x9}, {0x5, 0xa}, {0x1, 0x1}, {0x1, 0x7}, {0x6, 0x8}, {0x1}, {0x6, 0x9}, {0x0, 0x5}, {0x4}, {0x0, 0x4}, {0x1, 0x2}, {0x3, 0x8}, {0x0, 0x5}, {0x2, 0x4}, {0x1, 0x9}, {0x4}, {0x0, 0x9}, {0x5, 0x4}, {0x7, 0xa}, {0x4, 0x9}, {0x1}, {0x3, 0x3}, {0x6, 0x9}, {0x3, 0x8}, {0x2, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x5, 0x9}, {0x1, 0x9}, {0x6, 0x5}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x5, 0x6}, {0x0, 0x2}, {0x4, 0x2}, {0x2, 0x8}, {0x2, 0xa}, {0x7, 0x2}, {0x1, 0x8}, {0x7, 0x9}, {0x7, 0x3}, {0x3, 0xa}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x60, 0x1, 0x3, 0x33, 0x1, 0x6, 0x2, 0x12, 0x0, 0xc, 0xb, 0x4, 0xb, 0x1, 0x36, 0x12, 0x12, 0x1b, 0x3, 0x48, 0x60, 0x12, 0x1, 0x48, 0x30, 0xc, 0x5, 0x4, 0xb, 0x9, 0x4, 0x9]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x6, 0xa}, {0x0, 0x4}, {0x0, 0x2}, {0x5}, {0x5, 0x1}, {0x0, 0x9}, {0x0, 0x9}, {0x7, 0xa}, {0x0, 0x8}, {0x7, 0x2}, {0x0, 0x6}, {0x4}, {0x1, 0x9}, {0x7, 0x8}, {0x3, 0x6}, {0x3, 0x4}, {0x2, 0x4}, {0x0, 0x9}, {0x4, 0xa}, {0x3, 0x1}, {0x2, 0x8}, {0x1, 0x4}, {0x5, 0x3}, {0x4, 0xa}, {0x0, 0x9}, {0x6, 0x9}, {0x4, 0x6}, {0x0, 0x8}, {0x1, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x1}, {0x0, 0x7}, {0x2, 0x4}, {0x6, 0x9}, {0x7, 0xa}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x3, 0x3, 0x1, 0xc, 0x6c, 0x1]}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x3, 0xc, 0xb, 0x18, 0x18, 0x12, 0x1, 0x12, 0x60, 0x50, 0xb, 0x6c, 0xb, 0x48, 0x16, 0x36, 0x61, 0x2, 0x3, 0x30]}]}, @NL80211_BAND_2GHZ={0xec, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x5, 0x8}, {}, {0x2, 0x9}, {0x6, 0x7}, {0x3, 0x3}, {0x4, 0x2}, {0x6}, {0x3, 0x8}, {0x1, 0xa}, {0x6, 0x5}, {0x3}, {0x4}, {0x5, 0x3}, {0x3}, {0x4, 0x7}, {0x5, 0x8}, {0x1}, {0x5, 0x2}, {0x6, 0x3}, {0x6, 0x7}, {0x6, 0x9}, {0x7, 0x6}, {0x6, 0x4}, {0x3, 0x5}, {0x2, 0x8}, {0x3, 0x6}, {0x1, 0x9}, {0x2, 0x9}, {0x4}, {0x2, 0x9}, {0x2, 0x7}, {0x2, 0x8}, {0x3, 0x3}, {0x3, 0x4}, {0x6, 0x7}, {0x3, 0x6}, {0x0, 0x5}, {0x6, 0x1}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x3}, {0x1, 0x8}, {0x6, 0xa}, {0x2, 0xa}, {0x0, 0xa}, {0x2, 0x3}, {0x6, 0xa}, {0x3, 0x6}, {0x0, 0xa}, {0x1, 0x9}, {0x3, 0x4}, {0x2}, {0x1, 0x9}, {0x7, 0x5}, {0x4}, {0x0, 0x5}, {}, {0x1, 0x8}, {0x6, 0x4}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6c, 0x9, 0x43, 0x12, 0x6c, 0x3, 0xb, 0x5, 0xb, 0x6c, 0x1b, 0x48, 0x9, 0x6c, 0x3, 0x60, 0x30, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfff7, 0xffff, 0x6, 0xc, 0x7, 0x8, 0x3eb2]}}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x0, 0x8}, {0x5, 0xa}, {0x7, 0x7}, {0x1, 0x3}, {0x4, 0x9}, {0x6, 0xa}, {0x4, 0x5}, {0x1, 0x3}, {0x3, 0x4}, {0x7, 0x5}, {0x5, 0x2}, {0x7, 0x7}, {0x5, 0x7}, {0x1, 0x2}, {0x1, 0x8}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x2}, {0x1}, {0x1, 0x2}, {0x2, 0x9}, {0x5, 0x6}, {0x2, 0xa}, {0x6, 0x9}, {0x1, 0x1}, {0x3, 0x5}, {0x5, 0x6}, {0x1}, {0x4, 0x6}, {0x7, 0x8}, {0x0, 0x8}, {0x6}, {0x0, 0x4}, {0x5, 0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x7}, {}, {0x5}, {0x1}, {0x1, 0x3}, {0x3, 0x5}, {0x2, 0x9}, {0x6, 0x9}, {0x1, 0x8}, {0x2, 0x4}, {0x7}, {0x4, 0x5}, {0x4, 0x8}, {0x1, 0x5}, {0x0, 0x3}, {0x5, 0x1}, {0x0, 0x5}, {0x6, 0xa}, {0x5, 0xa}, {0x5, 0x7}, {0x2, 0x3}, {0x2, 0x6}, {0x2, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x2d, 0x30, 0x36, 0x48, 0x16, 0x1, 0x9, 0x6c, 0x51, 0x12, 0x4, 0x16, 0x5, 0x12, 0x6c, 0x6c, 0x5, 0x36, 0x2, 0x4, 0x82eeef2742701fbc, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x400, 0x1000, 0x200, 0x6, 0x6, 0x39, 0xffff]}}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6, 0x18, 0x5, 0x4, 0x2a, 0x30, 0x30, 0x36, 0x48, 0x3, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8001, 0x0, 0x4, 0x400, 0x1, 0x4, 0x6]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x30, 0xb, 0x3, 0x3, 0x5, 0x6c, 0x36, 0xc, 0x7e, 0x16, 0x30, 0x36, 0x5c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x6, 0x9}, {0x4, 0x4}, {0x3, 0x8}, {0x4}, {0x5, 0x9}, {0x7, 0x3}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6, 0x0, 0x60, 0x3, 0x18, 0x1b, 0x30, 0xb, 0x1, 0x48, 0x1, 0x36, 0x9, 0x3, 0x36, 0x7, 0x6, 0x48, 0x1, 0x60, 0x24, 0x3, 0xb, 0x48, 0x30, 0x1b, 0x12]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x4, 0x3}, {0x3, 0x1}, {0x3, 0x6}, {0x2, 0xa}, {0x6, 0x3}, {0x3, 0x3}, {0x0, 0xa}, {0x0, 0x8}, {0x5, 0x2}, {0x1, 0x2}, {0x4, 0x6}, {0x0, 0xa}, {0x3, 0x5}, {0x4, 0x1}, {0x4, 0x6}, {0x4, 0x8}, {0x5, 0x3}, {0x1, 0x2}, {0x2, 0x1f}, {0x7, 0x3}, {0x0, 0x1}, {0x7, 0x6}, {0x1, 0x9}, {0x5, 0xa}, {0x5, 0x7}, {0x0, 0x2}, {0x2, 0x5}, {0x0, 0x4}, {0x0, 0x2}, {0x4, 0x4}, {0x4, 0x9}, {0x2, 0x5}, {0x1}, {0x6, 0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x9}, {0x6, 0x5}, {0x3, 0x1}, {0x5, 0x7}, {0x2, 0x7}, {0x4, 0x1}, {0x3}, {0x0, 0x5}, {0x7, 0x3}, {0x1, 0xa}, {0x4, 0x2}, {0x7, 0x7}, {0x4, 0xa}, {0x0, 0xa}, {0x4, 0x1}, {0x7, 0x1}, {0x6, 0xa}, {0x2, 0x6}, {0x6, 0x9}, {0x4}, {0x6, 0xa}, {0x0, 0x4}, {0x6, 0x4}, {0x1, 0x2}, {0x3, 0x5}, {0x6}, {0x6, 0x8}, {0x1, 0x8}, {0x6, 0x6}, {0x1, 0x6}, {0x2, 0x2}, {0x7, 0x9}, {0x5, 0x4}, {0x4, 0x1}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1, 0x4, 0xdf1cc87113adec23, 0x4, 0x48, 0x4, 0x30, 0x18, 0x10, 0x5, 0x30, 0x4, 0x30, 0x36, 0x48, 0x4, 0x36, 0xb, 0x6c, 0x2, 0x1b, 0x1b, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0x6, 0x5, 0x9, 0x0, 0x101, 0x20]}}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x39, 0x0, 0xb, 0x38, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x39}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x73dc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xe8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x312, 0x0, 0x2, 0x2, 0x1, 0xfe00, 0x6e]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x81, 0x9, 0x9, 0xf83d, 0x5, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x4, 0x7, 0x64, 0x20, 0x2c9, 0x6, 0x7]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0x7}, {0x4}, {0x6}, {0x2, 0x8}, {0x1, 0x7}, {0x2, 0x1}, {0x6, 0x8}, {0x0, 0x9}, {0x4, 0x6}, {0x1}, {0x6, 0x6}, {0x1, 0x3}, {0x6, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x7, 0x6}, {0x1, 0x5}, {0x5, 0x6}, {0x3, 0x4}, {0x7, 0xa}, {0x0, 0x6}, {0x7, 0x4}, {0x6}, {0x6, 0x9}, {0x3, 0x5}, {0x2, 0x3}, {0x6, 0x9}, {0x4, 0x5}, {0x5, 0x6}, {0x4, 0x7}, {0x0, 0x2}, {0x0, 0x2}, {0x2, 0x1}, {0x1, 0x3}, {0x0, 0x3}, {0x2}, {0x3, 0x9}, {0x0, 0x5}, {0x5, 0x9}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x7}, {0x0, 0x6}, {0x3}, {0x5, 0x4}, {0x4, 0x8}, {0x3, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0x8}, {0x7, 0x4}, {0x2, 0x7}, {0x0, 0x6}, {0x7, 0x2}, {0x1, 0x2}, {0x0, 0x4}, {0x6, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x4, 0x3}, {0x5, 0x7}, {0x1}, {0x3}, {0x4, 0xa}, {0x0, 0x9}, {0x0, 0x5}, {0x4, 0x5}, {0x5, 0x2}, {0x6, 0x6}, {0x2, 0x5}, {0x3}, {0x4, 0x8}, {}, {0x4, 0x1}, {0x5, 0x3}, {0x0, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x18, 0x2, 0x30, 0x1, 0xc, 0x6, 0xc, 0x36, 0x30, 0x1b, 0x12, 0x12, 0x16, 0x9, 0x60, 0x3, 0x18, 0x30, 0x36, 0x5, 0x5, 0x3, 0x24, 0x18, 0x4]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x4, 0x6}, {0x6}, {0x7, 0x6}, {0x7, 0xa}, {0x5, 0x2}, {0x3, 0xa}, {0x1, 0x5}, {0x3, 0x3}, {0x0, 0x7}, {0x5, 0x9}, {0x4, 0x5}, {0x0, 0x1}, {0x0, 0x9}, {0x3, 0x3}, {0x7, 0x9}, {0x7, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8c44, 0x0, 0x4, 0x200, 0x8, 0x7, 0x69dd]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x578, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x554, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x5, 0x7}, {0x0, 0x4}, {0x4, 0x9}, {0x4, 0x3}, {0x1, 0xa}, {0x1, 0x9}, {0x2, 0x4}, {0x4, 0x6}, {0x1, 0x4}, {0x1, 0x7}, {0x2, 0x4}, {0x6, 0xa}, {}, {0x1, 0x3}, {0x1}, {0x0, 0x5}, {0x5, 0x2}, {0x5, 0x1}, {0x2, 0x1b}, {0x7, 0x2}, {0x2, 0x3}, {0x7}, {0x4, 0xa}, {0x0, 0x9}, {}, {0x1, 0x9}, {0x3, 0x3}, {0x3, 0x7}, {0x2, 0x9}, {0x3, 0xa}, {0x1, 0x5}, {0x1, 0x4}, {0x1}, {0x3, 0x5}, {0x7, 0x3}, {0x1, 0x8}, {0x0, 0x4}, {0x1, 0x8}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xfff, 0x7ff, 0x563, 0x26, 0x8, 0x2, 0x44]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x36, 0x4, 0xb, 0x1b, 0x12, 0x3, 0x3, 0x16, 0x6, 0xc, 0x2, 0x974648ffbd3fbe0a, 0x36, 0x36, 0x24, 0x48, 0x12, 0x24, 0xb]}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x7}, {0x5, 0x8}, {0x3, 0x9}, {0x2, 0x5}, {0x0, 0x6}, {0x7, 0x6}, {0x6, 0x8}, {0x0, 0x2}, {0x5, 0x8}, {0x7, 0x6}, {0x2, 0x4}, {0x4, 0x8}, {0x2, 0x4}, {0x5}, {0x4, 0x7}, {0x7, 0x2}, {0x6, 0xa}, {0x7, 0x4}, {0x7}, {0x2, 0x4}, {0x4, 0x2}, {0x0, 0x1}, {0x6, 0x3}, {0x6, 0x4}, {0x7, 0x7}, {0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x6, 0x9}, {0x7, 0xa}, {0x5, 0x4}, {0x0, 0x6}, {0x7, 0x7}, {0x7, 0x8}, {0x5, 0x4}, {0x0, 0x8}, {0x2, 0x3}, {0x1, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x3, 0x1}, {0x2, 0x2}, {0x3, 0xa}, {0x6, 0x7}, {0x1, 0x1}, {0x0, 0x4}, {0x7, 0x9}, {0x1, 0x4}, {0x2, 0x4}, {0x7}, {0x5, 0x2}, {}, {0x0, 0x8}, {0x3, 0x3}, {0x1, 0x7}, {0x4, 0x9}, {0x3}, {0x5, 0x7}]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x1, 0x9}, {0x2, 0xa}, {0x2, 0xa}, {0x7, 0xa}, {0x2, 0x8}, {0x5, 0xa}, {0x7, 0xa}, {0x2, 0x3}, {0x5, 0x2}, {0x3, 0xa}, {0x5}, {0x0, 0x8}, {0x5, 0xa}, {0x7}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x5, 0x5}, {0x4, 0x5}, {0x2, 0xa}, {0x6, 0x2}, {0x7, 0x9}, {0x2, 0xa}, {0x4}, {0x1, 0x8}, {0x5, 0x5}, {0x3, 0x1}, {0x4, 0x6}, {0x7, 0x4}, {0x1, 0x2}, {0x2, 0x6}, {0x7, 0x2}, {0x5, 0x6}, {0x6, 0x3}, {0x5, 0x3}, {0x5, 0x2}, {0x3, 0x8}, {0x4, 0xa}, {0x0, 0x6}, {0x7, 0xa}, {0x0, 0x2}, {0x4, 0x5}, {0x1}, {0x0, 0x4}, {0x1, 0x7}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x5}, {0x4}, {0x1, 0x3}, {0x6}, {0x2, 0xa}, {0x4, 0x9}, {}, {0x2, 0x4}, {0x6, 0x4}]}]}, @NL80211_BAND_2GHZ={0x124, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x0, 0x5}, {0x1}, {0x5, 0x6}, {0x0, 0x9}, {0x0, 0x4}, {0x7, 0xa}, {0x7, 0x4}, {0x1, 0x7}, {0x1, 0x2}, {0x6, 0x1}, {0x1, 0x2}, {0x6, 0x9}, {0x3, 0x1}, {0x0, 0x4}, {0x7, 0x4}, {0x6, 0xa}, {0x0, 0xa}, {0x1, 0x8}, {0x2, 0x1}, {0x6, 0x7}, {0x5, 0x2}, {0x3, 0x6}, {0x0, 0x6}, {0x6, 0x6}, {0x5, 0x1}, {0x6}, {0x1, 0x8}, {0x5, 0x7}, {0x1, 0x5}, {0x4}, {0x5, 0x8}, {0x0, 0xa}, {0x4, 0x7}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x2}, {0x5}, {0x6, 0x9}, {}, {0x7, 0x8}, {0x7, 0x1}, {0x7, 0x1}, {0x1, 0x3}, {0x0, 0x2}, {0x1, 0x3}, {0x1, 0x5}, {0x7, 0x2}, {0x0, 0x4}, {0x0, 0x3}, {0x0, 0x8}, {0x3, 0xa}, {0x1, 0x7}, {0x1, 0x2}, {0x7, 0x7}, {0x6, 0x8}, {0x0, 0x8}, {0x3, 0x1}, {0x7, 0x6}, {0x1, 0x8}, {0x0, 0x2}, {0x7, 0x8}, {0x1, 0x4}]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x1, 0x9}, {0x7, 0x3}, {0x7, 0x9}, {0x4, 0x6}, {0x1, 0x8}, {0x0, 0x3}, {0x0, 0x1}, {0x2, 0x5}, {0x1, 0x8}, {0x7}, {0x3, 0x7}, {0x5, 0xa}, {0x1, 0x1}, {0x3}, {0x4, 0x9}, {0x4, 0x9}, {0x2, 0x9}, {0x6, 0x7}, {0x3, 0x7}, {0x3, 0xa}, {0x5, 0x9}, {0x4, 0xa}, {0x3, 0x4}, {0x0, 0xa}, {0x1, 0x5}, {0x1, 0x7}, {0x5, 0x5}, {0x7, 0x6}, {0x0, 0x9}, {0x7, 0x8}, {0x1, 0x5}, {0x0, 0x9}, {0x5, 0x18}, {0x1, 0x9}, {0x6, 0x3}, {0x1, 0x4}, {0x0, 0xa}, {0x4, 0x8}, {0x1, 0x7}, {0x3, 0x4}, {0x0, 0x8}, {0x3, 0x8}, {0x7}, {0x3, 0x8}, {0x3, 0x4}, {0x0, 0x7}, {0x2, 0xe}, {0x6, 0x5}, {0x3, 0x2}, {0x4, 0xa}, {0x0, 0x5}, {0x0, 0x7}, {0x4, 0x8}, {0x1, 0x7}, {0x7, 0x4}, {0x4, 0x5}, {0x3, 0x9}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x16, 0x30, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x800, 0x8, 0x81, 0x7f, 0x3d99, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x12, 0x1b, 0x6c, 0x12, 0xc, 0x4, 0x60, 0x12, 0x60, 0x2, 0x12, 0xc, 0xc, 0x9, 0x2, 0x48, 0xfab5891ace7a103b, 0x9, 0x36, 0x2, 0x4, 0x6, 0x16, 0x16, 0x2, 0x36, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x401, 0x2, 0x2, 0x24, 0x8, 0x23]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x1}, {0x1, 0x6}, {0x1}, {0x3, 0x3}, {0x4, 0x1}, {0x7, 0x2}, {0x4, 0x9}, {0x2, 0x2}, {0x5, 0x8}, {0x7, 0x7}, {0x7, 0x2}, {0x6, 0x6}, {0x7, 0x4}, {0x1, 0x3}, {0x4, 0x7}, {}, {0x3, 0x6}, {0x0, 0x3}, {0x4, 0x6}, {0x0, 0x8}, {0x5}, {0x3, 0x5}, {0x3, 0x1}, {0x6}, {0x0, 0x3}, {0x0, 0xa}, {0x7, 0x4}, {0x7, 0x4}, {0x5, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x7, 0x8}, {0x2, 0x4}, {0x4, 0x4}, {0x5}, {0x4, 0xa}, {0x7, 0x3}, {0x2}, {0x1}, {0x7, 0x3}, {0x0, 0x3}, {0x2, 0x7}, {0x1, 0x7}, {0x1, 0x4}, {0x6}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0x3}, {0x2, 0x4}, {0x6, 0x9}, {0x2, 0x7}, {0x5, 0x4}, {0x4, 0x3}, {0x4, 0xa}, {0x6, 0x6}, {0x5, 0x6}, {0x4, 0x3}, {0x3, 0x9}, {0x0, 0x9}, {0x4, 0x4}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x3}, {0x0, 0xa}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x29c4, 0x5, 0x74b9, 0xff, 0x1ff, 0x6]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x937, 0xfff, 0x2, 0x6, 0x3, 0x2, 0x1f, 0x6]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x1, 0x60, 0x24, 0x9, 0x48, 0x2, 0x48, 0x0, 0x5, 0x12, 0x36, 0x9, 0x60, 0x60, 0x24, 0xc, 0xf, 0x6, 0x12, 0x16, 0x6, 0x30, 0xb, 0x36, 0x24]}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x4, 0x6}, {0x5, 0x4}, {0x1, 0x1}, {0x5, 0x2}, {0x1, 0x2}, {0x3, 0x6}, {0x7, 0x4}, {0x7, 0x8}, {0x4, 0x5}, {0x5, 0x8}, {0x3, 0x9}, {0x4, 0x8}, {0x5, 0x2}, {0x6, 0xa}, {0x0, 0x5}, {0x0, 0x1}, {0x3, 0x8}, {0x2, 0x3}, {0x1}, {0x4, 0x3}, {0x7, 0x9}, {0x0, 0x7}, {0x4, 0x8}, {0x4, 0x9}, {0x7, 0x4}, {0x3, 0xa}, {0x7, 0x5}, {0x1, 0x1}, {0x0, 0x2}, {0x7, 0x1}, {0x1, 0x6}, {0x5}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x5}, {0x7, 0xa}, {0x0, 0x7}, {0x3, 0x8}, {0x1, 0x5}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x7}, {0x5, 0x9}, {0x0, 0x7}, {0x0, 0x1}, {0x2}, {0x5, 0x9}, {}, {0x2, 0x5}, {0x6, 0x6}, {0x1, 0x4}, {0x5, 0x9}, {0x0, 0x7}, {0x5, 0x6}, {0x6, 0xa}, {0x0, 0x9}, {0x3}, {0x4, 0x5}, {0x4, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1000, 0x1, 0x200, 0xf800, 0x8000, 0xffff, 0x81]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x5, 0x2}, {0x1, 0x7}, {0x6, 0x8}, {0x7, 0xa}, {0x3, 0x1}, {0x1, 0x2}, {0x3, 0x3}, {0x5, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x0, 0x24, 0x12, 0x2, 0x6, 0x2, 0x12]}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7e6, 0x7, 0x400, 0x0, 0x3, 0x81, 0x20]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x5, 0x1}, {0x6, 0x1}, {0x4, 0x9}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x3, 0x16, 0x18, 0x5, 0x1, 0x1, 0xb, 0x0, 0x12, 0x12, 0x3, 0x4, 0x9, 0x48, 0x24, 0x1, 0xb, 0x30, 0x4, 0x2e, 0xb, 0x6c, 0x9, 0x1, 0x30, 0x48, 0x12, 0x5, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x7, 0x2, 0x5, 0x0, 0x196, 0x4]}}]}, @NL80211_BAND_6GHZ={0x100, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa43d, 0x5c, 0xffff, 0xff, 0xfff8, 0x2, 0x4, 0x5]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6, 0x3, 0x1, 0xc]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0xa}, {0x2, 0xa}, {0x6, 0x7}, {0x2, 0x9}, {0x5, 0x4}, {0x1, 0x7}, {0x5, 0x7}, {0x0, 0x2}, {0x0, 0x2}, {0x2, 0x5}, {0x6, 0x2}, {0x0, 0x9}, {0x4, 0x5}, {0x2, 0x5}, {0x0, 0x8}, {0x3, 0x8}, {0x0, 0x8}, {0x1, 0x1}, {0x4, 0x2}, {0x1, 0x8}, {0x1, 0x5}, {0x6, 0x9}, {0x0, 0x3}, {0x3, 0x1}, {0x2, 0x7}, {0x3, 0x2}, {0x4, 0x8}, {0x0, 0x7}, {0x0, 0x6}, {0x1, 0x8}, {0x1, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0xa}, {0x5, 0x2}, {0x0, 0x6}, {0x5, 0x1}, {0x7, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x6}, {0x2, 0xa}, {0x1, 0xa}, {0x1, 0x4}, {0x5, 0x7}, {0x5, 0x4}, {0x6, 0xa}, {0x6, 0x4}, {0x4, 0x9}, {0x5, 0x1}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x0, 0x7}, {0x2, 0xa}, {0x0, 0xa}, {0x2, 0x1}, {0x6, 0x5}, {0x1, 0x6}, {0x6, 0xa}, {0x5, 0x3}, {0x0, 0x9}, {0x2, 0x1}, {0x0, 0x8}, {0x4, 0x8}, {0x2, 0xa}, {0x2, 0x8}, {0x0, 0x8}, {0x3, 0x8}, {0x0, 0x7}, {0x1, 0x9}, {0x6, 0x5}, {0x3, 0x8}, {0x2, 0x8}, {0x1, 0xa}, {0x6, 0x7}, {0x0, 0x9}, {0x1, 0x8}, {0x3, 0x8}, {0x7, 0x1}, {0x7, 0x1}, {0x0, 0x3}, {0x6, 0x5}, {0x6, 0x3}, {0x6, 0x6}, {0x3, 0x4}, {0x4, 0xa}, {0x5, 0xa}, {0x0, 0x8}, {0x7, 0x4}, {0x5, 0x7}, {0x4, 0x2}, {0x1, 0x9}, {0x6}, {0x4, 0x9}, {0x1, 0xa}, {0x1, 0x4}, {0x1, 0x4}, {0x4, 0x4}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x4}, {0x7, 0x1}, {0x0, 0x2}, {0x0, 0x6}, {0x0, 0x7}, {0x7}, {0x3, 0x3}, {0x3}]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x3, 0x1}, {0x0, 0x4}, {0x7, 0x2}, {0x1, 0x5}, {0x5, 0x7}, {0x5}, {0x5, 0x9}, {0x6, 0x1}, {0x3, 0x5}, {0x5, 0x3}, {0x0, 0x1}, {0x5, 0x9}, {0x2}, {0x2, 0x7}, {0x1, 0x3}, {0x3, 0x4}, {0x1, 0x2}, {0x1, 0x2}, {0x2, 0x9}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x5}, {0x3, 0x8}, {0x6, 0x2}, {0x4, 0x4}, {0x3, 0x3}, {0x6, 0x3}, {0x6, 0xa}, {0x2, 0x1}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x12, 0x2, 0xb, 0x3, 0x12, 0x24, 0x4, 0x2, 0x30, 0x5, 0x24, 0x0, 0x30, 0x2, 0x5, 0x16, 0x1b, 0x1, 0x12, 0x0, 0x28, 0x1b, 0x4, 0x24, 0x1b, 0x1f]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x5, 0x5, 0x3, 0x2, 0x1, 0x8001, 0x1]}}]}, @NL80211_BAND_6GHZ={0x100, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x12519f6eb9e1e709, 0x30, 0x18, 0x9, 0xb, 0x5, 0x6, 0x6, 0xb, 0x2, 0xb, 0x16, 0x60, 0x24, 0x4, 0xc, 0x16, 0x6, 0xb, 0x36, 0xc, 0x6c, 0x36, 0x12, 0x48, 0x4, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x225d, 0x20, 0xe52c, 0x628c, 0x2, 0xe7, 0x9, 0x4e17]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x18, 0x5, 0x12, 0xb, 0x36, 0x24, 0x5, 0x1, 0x60, 0x5, 0x24, 0x9, 0x16, 0x3, 0x48, 0x16, 0x9, 0x4, 0x2, 0x2, 0x48, 0x36, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xff, 0x8000, 0x5, 0x9, 0xfffb, 0x0, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x1}, {0x7, 0xa}, {0x4, 0x4}, {0x2, 0xa}, {0x2}, {}, {0x5, 0x8}, {0x4, 0x5}, {0x1, 0x8}, {0x2, 0x1}, {0x3, 0x8}, {0x4, 0x6}, {0x1, 0x6}, {0x2, 0x3}, {0x5, 0x9}, {0x3, 0x1}, {0x6, 0x4}, {0x2, 0x6}, {0x7, 0x6}, {0x4, 0x7}, {0x6, 0xa}, {0x3, 0x8}, {0x6, 0x6}, {0x5, 0x8}, {0x4, 0x9}, {0x1, 0x7}, {0x2, 0x6}, {0x3, 0x2}, {0x7, 0x2}, {0x5, 0x8}, {0x7, 0x7}, {0x5, 0x1}, {}, {0x5, 0x8}, {0x0, 0x1}, {0x2, 0x7}, {0x4, 0x7}, {0x1, 0x6}, {0x5, 0x8}, {0x1, 0x1}, {0x0, 0x2}, {0x1, 0x3}, {0x4}, {0x2, 0x5}, {0x3, 0xa}, {0x0, 0x1}, {0x6, 0x7}, {0x6, 0x4}, {0x2, 0x2}, {0x1, 0x1}, {0x5, 0x8}, {0x2, 0x6}, {0x2}, {0x3, 0x3}, {0x4, 0x8}, {0x6, 0x9}, {0x6, 0x3}, {0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x6, 0x8}, {0x1, 0x7}, {0x2, 0x4}, {0x6, 0x6}, {0x2, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x7}, {0x6, 0x2}, {0x2, 0x8}, {0x3, 0x2}, {0x6, 0x4}, {0x1, 0xa}, {}, {0x2, 0x7}, {0x2, 0x8}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x1}, {0x2, 0x5}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x3}, {0x0, 0x8}, {0x3, 0x1}, {0x7, 0x4}, {0x5, 0x6}, {0x7, 0xf}, {0x2, 0x2}, {0x4, 0xa}, {0x3, 0x1}, {0x3, 0x9}, {0x1, 0x3}, {0x5, 0xa}, {0x1, 0x8}, {0x0, 0xa}, {0x5, 0x7}, {0x6, 0x9}, {0x2, 0x6}, {0x1, 0x9}, {0x0, 0x5}, {0x2, 0x6}, {0x2, 0x2}, {0x6, 0x5}, {0x0, 0x5}, {0x6, 0x7}, {0x1, 0xa}, {0x7, 0x6}, {0x6, 0x1}, {0x4, 0x8}, {0x3, 0x3}, {0x3}, {0x7, 0x6}, {0x5, 0x9}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x74}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xba}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x91}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xfc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xb, 0x2, [{0x7, 0x9}, {0x3}, {0x7, 0xa}, {0x1, 0x5}, {0x7, 0x9}, {0x4, 0xa}, {0x4, 0x7}]}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6, 0xb, 0x36, 0xc, 0x2, 0x6, 0x4, 0x2, 0x9, 0x36, 0x18, 0xc, 0x9, 0x35, 0x9, 0x1b, 0x3, 0x60, 0x60, 0x1b, 0x60, 0x6c, 0x48, 0x5, 0x6, 0x6c, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x1, 0x3, 0x7, 0x401, 0xc2, 0x200, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x1, 0x6, 0xff1, 0x2, 0x1f, 0xd2a]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x64ae, 0x401, 0x2, 0x5, 0x2, 0x5, 0x8, 0x3f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x0, 0x3}, {0x1, 0x8}, {0x5, 0x8}, {0x7, 0x1}, {}, {0x3, 0x7}, {0x6, 0x4}, {0x0, 0x8}, {0x2, 0x6}, {0x0, 0x3}, {0x1, 0x8}, {0x0, 0x8}, {0x4, 0x6}, {0x2, 0x6}, {0x7, 0x1}, {0x1, 0xa}, {0x7}, {}, {0x3, 0x7}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x7}, {0x4, 0x8}]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0x1}, {0x3, 0x7}, {0x4, 0x1}, {0x2, 0xa}, {0x7, 0x5}, {0x3, 0x2}, {0x6, 0xa}, {0x4, 0x5}, {0x5, 0x1}, {0x6, 0x5}, {0x1, 0x3}, {0x5, 0xa}, {0x0, 0x2}, {0x0, 0x8}, {0x0, 0x9}, {0x1, 0x17}, {0x2, 0xa}, {}, {0x4, 0x5}, {0x0, 0x8}, {0x4, 0x4}]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x5, 0x4}, {0x7, 0x9}, {0x0, 0x3}, {0x2, 0x9}, {0x5, 0x4}, {0x5, 0x8}, {0x7, 0x3}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x1}, {0x5, 0xa}, {0x3, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x401, 0x2, 0x0, 0xbc, 0x100, 0x4, 0x7]}}]}]}]}]}]}, 0x1fd4}, 0x1, 0x0, 0x0, 0x44084}, 0x4001) 22:54:52 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0xf}, 0x0) [ 712.317429] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 712.369650] audit: type=1804 audit(1633647292.612:823): pid=22309 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1372/cgroup.controllers" dev="sda1" ino=14113 res=1 [ 712.518619] bridge987: port 1(vlan529) entered blocking state [ 712.524925] bridge987: port 1(vlan529) entered disabled state 22:54:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x4c00, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 712.554107] audit: type=1804 audit(1633647292.782:824): pid=22324 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1499/cgroup.controllers" dev="sda1" ino=14467 res=1 [ 712.635471] device vlan529 entered promiscuous mode [ 712.776744] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 712.785645] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 712.915374] bridge987: port 2(vlan530) entered blocking state [ 712.941324] bridge987: port 2(vlan530) entered disabled state [ 712.971870] device vlan530 entered promiscuous mode 22:54:53 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 22:54:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x4260f, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:54:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x200000000000000}, 0x0) 22:54:53 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f0000000740)={{'\x00', 0x3}, {}, 0x1, 0x0, 0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x200}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=r4, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="040046000500340456000000080026006c090000"], 0x30}}, 0x44000054) sendfile(r2, r1, 0x0, 0x100000002) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) r6 = getpgid(0xffffffffffffffff) kcmp(r5, r6, 0x0, r0, r2) 22:54:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x22) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000007800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000077c0)={&(0x7f0000007580)={0x214, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x80}, 0x20040040) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00@\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="000000000000ffff000000000a0001006e6574656d0000001c000200"/52], 0x4c}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delroute={0x40, 0x19, 0x300, 0x70bd2d, 0x25dfdbfd, {0xa, 0x10, 0x20, 0x4, 0x0, 0x4, 0xfe, 0x6, 0x2000}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x8}}, @RTA_PREF={0x5, 0x14, 0x40}, @RTA_OIF={0x8, 0x4, r8}, @RTA_UID={0x8, 0x19, r9}]}, 0x40}}, 0x20008001) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 713.231827] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 713.264423] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 713.303613] audit: type=1804 audit(1633647293.542:825): pid=22358 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1373/cgroup.controllers" dev="sda1" ino=14161 res=1 [ 713.560797] audit: type=1804 audit(1633647293.802:826): pid=22361 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir065698470/syzkaller.m8XkIq/1279/cgroup.controllers" dev="sda1" ino=14513 res=1 22:54:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x42610, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 713.619549] bridge990: port 1(vlan531) entered blocking state [ 713.645247] bridge990: port 1(vlan531) entered disabled state [ 713.727892] device vlan531 entered promiscuous mode 22:54:54 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x300}, 0x0) 22:54:54 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3e0000ff", @ANYRES16=r3, @ANYBLOB="010000000000000000002b00000008000300", @ANYRES32=r4, @ANYBLOB="040046000500340056000000080026006c090000"], 0x30}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x9, 0xd0, 0x9, 0xc0, 0x0, 0x4, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x75a6, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x16, 0xd12b, 0x2, 0x2, 0x100000000, 0xfffffff9, 0x5, 0x0, 0x8, 0x0, 0x8000}, 0xffffffffffffffff, 0x1, r1, 0x10) 22:54:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x42611, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 714.039805] audit: type=1804 audit(1633647294.282:827): pid=22397 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1374/cgroup.controllers" dev="sda1" ino=14161 res=1 [ 714.061604] bridge990: port 2(vlan532) entered blocking state [ 714.114362] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 714.154407] bridge990: port 2(vlan532) entered disabled state [ 714.230492] device vlan532 entered promiscuous mode 22:54:54 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0xcce}, 0x0) 22:54:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:54:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x42612, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:54:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x400000000000000}, 0x0) 22:54:54 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fchmod(r0, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000200)=0xc) r5 = perf_event_open(&(0x7f0000000340)={0x7, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10048, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f0000000740)={{'\x00', 0x3}, {}, 0x1, 0x0, 0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x200}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r6, &(0x7f0000000040)=""/46, 0x2e) getdents64(r6, &(0x7f0000000080)=""/66, 0x42) ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, &(0x7f0000000e80)={{r6}, "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"}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 22:54:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, 'cgroup.controllers\x00'}, {0x20, 'cgroup.controllers\x00'}, {0x20, 'nl80211\x00'}, {0x20, 'wlan1\x00'}, {0x20, ':-$,'}, {0x20, 'o\xde'}, {0x20, ',-]-'}], 0xa, "fc7bde020a1047006085923e6b49f3ef14b5cadc3cf09ac00104eb2b097c16fb56b1e7709cd52659fb55eda1ad72644898df931041a95a2e5ab297f5"}, 0x8c) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r6, &(0x7f0000000040)=""/46, 0x2e) getdents64(r6, &(0x7f0000000080)=""/66, 0x42) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)={0x228, r7, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xe0, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffff8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffff7a9}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xa3}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x200}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffffe}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1ff}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffeff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3c99}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xed7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0xfc, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc6d}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5b9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xe}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x165a}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xedeb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3fff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}]}, {0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4460}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeaa}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x20000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x74}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x36}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x228}, 0x1, 0x0, 0x0, 0x8001}, 0x4008000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000900)={0x138, r5, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xf}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3e3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x177}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x38}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffdd}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x68c}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}, @NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xdc53}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x10000}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5cb}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x1, 0xa000, 0x4, 0x9, 0x0, 0x0, 0x5, 0x3ff, 0x95a2, 0x65f]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x2]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x47}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x7, 0xee, 0x4, 0x100, 0x0]}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x145}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2cf}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x3]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x800]}]}]}, 0x138}}, 0x20) sendfile(r2, r1, 0x0, 0x100000002) [ 714.853496] audit: type=1804 audit(1633647295.082:828): pid=22425 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1375/cgroup.controllers" dev="sda1" ino=14529 res=1 [ 714.919255] nla_parse: 4 callbacks suppressed [ 714.919265] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:54:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x42613, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 715.009387] audit: type=1804 audit(1633647295.212:829): pid=22433 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1500/cgroup.controllers" dev="sda1" ino=14594 res=1 [ 715.061831] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 715.097746] bridge993: port 1(vlan533) entered blocking state [ 715.103779] bridge993: port 1(vlan533) entered disabled state [ 715.119097] device vlan533 entered promiscuous mode [ 715.141950] bridge10: port 1(vlan4) entered blocking state [ 715.155418] bridge10: port 1(vlan4) entered disabled state [ 715.182896] device vlan4 entered promiscuous mode 22:54:55 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 22:54:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x42614, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:54:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:54:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x600000000000000}, 0x0) 22:54:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) [ 715.567066] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 22:54:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x42615, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 715.597379] audit: type=1804 audit(1633647295.832:830): pid=22432 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1375/cgroup.controllers" dev="sda1" ino=14529 res=1 22:54:55 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0xce0c}, 0x0) [ 715.714458] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:54:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000040)=0x5) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 22:54:56 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) getdents64(r1, &(0x7f0000000440)=""/65, 0x41) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000340)={0x1, @vbi={0x0, 0x1f, 0x66f9, 0x31324d59, [0x3f, 0x7fffffff], [0x2, 0x3], 0x1}}) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xeaa3b000) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r2, &(0x7f0000000040)=""/46, 0x2e) getdents64(r2, &(0x7f0000000080)=""/66, 0x42) r3 = perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x70}, 0x90, 0x49, 0x0, 0x7, 0x0, 0x80002, 0x0, 0x0, 0x401, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000740)={{'\x00', 0x3}, {}, 0x1, 0x0, 0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x200}) pread64(r3, &(0x7f0000000000)=""/11, 0xb, 0x1) r4 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cpu.stat\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000000000002b00000008000300", @ANYRES32=r7, @ANYBLOB="0c0099002b38000045000000040044006c6bba6888ee73bfafdb9ec9fbf1d81e91613dcc7878caea53429163ad36bd1f0d9e5c4d08000c0064000000"], 0x58}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) [ 715.949769] bridge996: port 1(vlan534) entered blocking state 22:54:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x42616, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 715.990941] bridge996: port 1(vlan534) entered disabled state [ 716.035405] device vlan534 entered promiscuous mode [ 716.061057] audit: type=1804 audit(1633647296.302:831): pid=22503 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1502/cgroup.controllers" dev="sda1" ino=14579 res=1 [ 716.081923] bridge12: port 1(vlan5) entered blocking state [ 716.104297] bridge12: port 1(vlan5) entered disabled state [ 716.118589] device vlan5 entered promiscuous mode 22:54:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:54:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x42617, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:54:56 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 22:54:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x800000000000000}, 0x0) 22:54:56 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x4082) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) [ 716.409954] validate_nla: 14 callbacks suppressed [ 716.409964] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 716.442157] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 22:54:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x42618, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:54:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000414000/0x3000)=nil, 0x3000, 0x2, 0x28011, r0, 0x3d202000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000170000000000008300", @ANYRES32=r4, @ANYBLOB="04004600040051800500340056000000080026006c0900006fb9c487f95991a69f555b6ab740b0063e7aed68c9becc036830ab3e6c5bf61e59117dc42384b5babd29e1ff16476396661a82c667f94fa52c06a1018df3aa9e23cab8b8790000000000000397d125da53f79e7df4694030813fec4384e5767fe95e18e1476159585ff5bc40cb13965244804fde054efbe9555fc13d112ba1465f56eed7e2f68388adb06e9ab05c07020f1a8770e71f49b30d80d316ad16e012a9d1725d4b446e40574dbcc2787e0420e80b8f277cd23bff53b9f9cef8b4c4b39034e1cecc2eb4c77a44e007bbfae048ac9c8afe00973100"/250], 0x34}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000880)=@nat={'nat\x00', 0x1b, 0x5, 0x438, 0x0, 0xa8, 0xffffffff, 0x0, 0x0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, &(0x7f0000000200), {[{{@ip={@multicast2, @broadcast, 0xffffff00, 0x561abe092fa9a502, 'nr0\x00', 'batadv0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x40}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x15}, @initdev={0xac, 0x1e, 0xd6, 0x0}, @gre_key=0x2, @port=0x4e21}}}}, {{@ip={@broadcast, @multicast1, 0xffffffff, 0x0, 'bridge_slave_1\x00', 'nr0\x00', {0xff}, {0xff}, 0x1d, 0x2, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x4, 0x204, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @private=0xa010102, @broadcast, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@ah={{0x30}, {[0xfe, 0x3f]}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0xd, 0x1, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x3, 0x2, 0x2, 0x3], 0x2, 0x1}, {0x0, [0x7, 0x5, 0x1, 0x0, 0x4, 0x6], 0x0, 0x2}}}}, {{@ip={@local, @local, 0xff000000, 0xff, 'gre0\x00', 'netdevsim0\x00', {0xff}, {}, 0x5c, 0x1, 0xa}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x4}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x2, @rand_addr=0x64010101, @private=0xa010101, @port=0x4e21, @gre_key=0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000005c0)=""/139) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r5, &(0x7f00000012c0)="0d268a927f1b6588b93e480b41ba3860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd60da03059bcecc7a9544fa3a07e758044ab4ea6f7ae56d88fecf9141a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f0000000080)={{'\x00', 0x2}, {0xffff}, 0x1c0, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000480)="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", 0x12f, 0x0, &(0x7f00000006c0)={0x2, 0x141, {0x1, 0xc, 0x44, "4ef2ba89f4f29009e7a8b6be39bb5c312addfdbe6012053fd41bcfb0107005892802e84a9f5bc859f9928b98cdd760f6aef1810139f45d872d2d934b80070e78f343bfd2", 0xf0, "c02adae3d61cc4fa3116f928aae7aac7f52974daea1a94ea58e7236b79541bc5ddfd302c2b00d908da72c00b53e7033a6a4684165e3b9269822824cf052f9366aefee4a65174991060e35133eebb7bd0ff175f53f8f5e7706e90d1540d4ad058620878f5d390fbf1012f550de00ab46bedbda6fdae1242bd57828d79ee1d4c7833d2e657cd8ba5492f1fb950d177b2f19ce20bc8ee8fe1ac84491c92653440b4a27e0992b57c25589b75574bc4ae8a9ad775fdebdea3a9376fdb47f32126a0b2014c87a17333caed79705fe58124096bf35b921abbc3bfb4382e5e97d006dcc2b23c234c4d565ed3a0e2bcf3b0ee21ea"}, 0x64, "6b674d3c9eb6036810e305b8ff00f26266dc962be50bb6151bcc8f547d25a65707fe7358c201195bd6220d104621353070287f7be275ef7c35b67b7e4bf6d233bb84bb831132b818f10fa13858d6ec09f4c5b9ead504ae8334c2277be349a678f119aef2"}, 0x1b1}) [ 716.598407] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 716.628471] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 716.761106] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 716.881740] bridge14: port 1(vlan6) entered blocking state [ 716.908937] audit: type=1804 audit(1633647297.152:832): pid=22544 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1377/cgroup.controllers" dev="sda1" ino=13955 res=1 [ 716.960779] bridge14: port 1(vlan6) entered disabled state [ 716.982791] device vlan6 entered promiscuous mode [ 716.995120] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 717.001875] audit: type=1804 audit(1633647297.242:833): pid=22554 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1503/cgroup.controllers" dev="sda1" ino=14695 res=1 [ 717.080873] audit: type=1804 audit(1633647297.322:834): pid=22554 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1503/cgroup.controllers" dev="sda1" ino=14695 res=1 [ 717.087570] bridge999: port 1(vlan535) entered blocking state [ 717.114714] bridge999: port 1(vlan535) entered disabled state 22:54:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 717.130550] device vlan535 entered promiscuous mode 22:54:57 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x30000}, 0x0) [ 717.214400] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 22:54:57 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xfffffffffffffffd]}, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@srh={0x16, 0x6, 0x4, 0x3, 0x7f, 0x10, 0x0, [@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote]}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x3c, r5, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x3c}}, 0x8804) sendfile(r3, r2, 0x0, 0x100000002) [ 717.255050] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 22:54:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x42619, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:54:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r3, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10, 0x4b}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xd}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x28, r3, 0x2, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x28}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 717.339019] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 717.360370] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 717.498168] audit: type=1804 audit(1633647297.733:835): pid=22586 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1504/cgroup.controllers" dev="sda1" ino=14594 res=1 [ 717.547895] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 22:54:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0xa00000000000000}, 0x0) 22:54:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:54:58 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x34000}, 0x0) [ 717.759242] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:54:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="e43c2543117e7138d3b1f087f12e2a559dcfc07e76debb0000000000", @ANYRES32=r4, @ANYBLOB="040046000500340056000000080026006c090000"], 0x30}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 22:54:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x4261a, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 717.833958] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 717.968781] audit: type=1804 audit(1633647298.203:836): pid=22613 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1379/cgroup.controllers" dev="sda1" ino=14610 res=1 [ 718.013030] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:54:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x4261b, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 718.244017] bridge1002: port 1(vlan536) entered blocking state [ 718.272296] bridge1002: port 1(vlan536) entered disabled state 22:54:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0)='P\x00', &(0x7f0000000100)='\x00', &(0x7f0000000440)='cgdo\xfd\xff.controllers\x00\xb3\xae\xe2\xb2\x06\xdaV\x85\xb9\xf1\xe6\xb5|\xa1\xf4', &(0x7f0000000200)='cgroup.controllers\x00', &(0x7f0000000240)='\x9c\xb1\x16\xdc\x01Q\xf4\xdd', &(0x7f0000000280)=':@-\x00', &(0x7f0000000340)='cgroup.controllers\x00', &(0x7f0000000380)='@:\x00'], &(0x7f00000004c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) mknod$loop(&(0x7f0000000500)='./file0\x00', 0x4, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002b00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x34}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 718.321889] device vlan536 entered promiscuous mode 22:54:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 718.462930] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:54:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f00007e1000/0x2000)=nil, 0x2000, 0x2, 0x28011, r0, 0x8000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000e8f1c282c0ab21abe82481962a96b326fd2bf5b601d2b2e2ffbabf9e6f92bddbaac9f9f9a4392047151d94f8882ea27be8b1e9ac93508594aefcf13d4abdde9d5e1fff352a7029fb948569a625b7ad18b800471b5a19938e5e8b05165f6232b9a1aa210dfdcca1ced9defdfc11bed1fa75ae004b1d241609d82adcfad31473fe25a6729f49101c7a5241131f8720601596c10ea84706d54ea07020c97495c8ba7d01b51a6ed9ec224292df9b6485fb55ed8f", @ANYRES16=r3, @ANYBLOB="010000000000000000002b00000008000300", @ANYRES32=r4, @ANYBLOB="040046000500340056000000080026006c090000"], 0x30}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 22:54:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x4261c, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:54:58 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) getdents64(r0, &(0x7f0000000080)=""/66, 0x42) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000001340)="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", 0x1000, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @private=0xa010102}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x20000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="3463a3fc4d1be80b13b330301b465e65c6e8586a777ae2f4a344ef61c3e4e558c92f19b2c680bd90f16432bbab1540df39c1c29cfea21e68dded223a76743343603648f27ec80cde76e6d63a72fde9cda68325af1849bda2e4a525cc628c795a825ac95df30008000023bfc0cdae2fac9ebea4e3272e216db8663e522578a9f136059132d4aa036fb7d8032caab53da93b382db8579111482d4a092f7d7d2499a88f1cac16673be8878a6508f627d1694a339a57c4a5140db534afdfdcfe07b586b85f2484e7cb7d6f5a8ea5669f6955458dbec398c54c487a4a", @ANYRES32], 0x208e24b) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2d, 'io'}, {0x2d, 'io'}]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) read(r2, &(0x7f0000000000)=""/238, 0xee) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/66, 0x42) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002b00000008000300db2a748068b4bf9518cdb935141d9a7706c38300a941324259a8b0730a695da7a604c8beededdda8c8ec13a3e7f662c08c1d73982eb21302f63843b740fa57bee50150793e92f5b5504b9a469bdab1e14d380bf1d53f6b469c99433c558dad73bfde531ba4168fbcd810c9865886d21303f80be42f9e566034a07cb1fdf6f321b87b18280b93e34d93c2", @ANYRES32=r6, @ANYBLOB="04004600040051800500340046000000080026006c090000"], 0x34}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) [ 718.634358] bridge1002: port 2(vlan537) entered blocking state [ 718.643007] bridge1002: port 2(vlan537) entered disabled state [ 718.672604] device vlan537 entered promiscuous mode [ 718.691996] audit: type=1804 audit(1633647298.933:837): pid=22663 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1506/cgroup.controllers" dev="sda1" ino=14695 res=1 22:54:59 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 22:54:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0xc00000000000000}, 0x0) 22:54:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x144, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_KEYS={0x114, 0x51, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x12, 0x4, "b62ea5a8293cc9899961b6dbba2d"}, @NL80211_KEY_SEQ={0x14, 0x4, "61da3e6eb13bb81d8b8f1acf649176a9"}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "e04a387dad"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "c8e9760404"}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "95337267aa267341875ef2ed5f"}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x144}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 22:54:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:54:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x4261d, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:54:59 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) [ 718.992030] audit: type=1804 audit(1633647299.233:838): pid=22684 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1507/cgroup.controllers" dev="sda1" ino=13987 res=1 [ 719.126680] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:54:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x4261e, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 719.350365] bridge1005: port 1(vlan538) entered blocking state [ 719.383687] audit: type=1804 audit(1633647299.623:839): pid=22661 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1380/cgroup.controllers" dev="sda1" ino=14034 res=1 [ 719.421341] bridge1005: port 1(vlan538) entered disabled state [ 719.522070] device vlan538 entered promiscuous mode 22:54:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x8003, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r3, &(0x7f0000000040)=""/46, 0x2e) getdents64(r3, &(0x7f0000000080)=""/66, 0x42) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r4, &(0x7f0000000040)=""/46, 0x2e) getdents64(r4, &(0x7f0000000080)=""/66, 0x42) writev(r4, &(0x7f0000000740)=[{&(0x7f0000000180)="22a52d45399cf1953d534f0c61", 0xd}, {&(0x7f0000000200)="17090eeabe3f7efca145f459822752391474fb68464d11ad29e0f8", 0x1b}, {&(0x7f0000000340)="0eafbae5e9543408f371a372b2e7d16443a082fff16f79601784f4e1ba0a89328b57afdfd0a4a7359a5b300dc52b39e42c510a5485de4555cf149b74fddde2cd343ee0b73084cf6b79bd7dbf9acc987ad84e850355e737419cf159d39d01058da76a8753d037435eb0b5e212e2deacefc8fa71999bb1950b8cea2a5f3966e39b03a10862f385f3e3865c88fe92aa8e56d0ad2b", 0x93}, {&(0x7f0000000400)="fdef7edaebe27cadbf2dc0f98f810f13bdeb1cc21a2f9f91546cdddcad9affdeb1b043b28fddf36690189e4f1c630ab8ae226f12412e77639c3a481c0887580753f41e9fa2d3b1c6b45b91c85e29135f14024bb6318e010c137eb0f5e8c993a5a4c79398bf1c4cfe9cfe1351db6484b5bd9eddff23ed8e3606501eddcb25c374125f5abc150f725f4bb11c20fd92cbc1a30baf41c359e63a2705a10ecd148269442d9bd138602ba3c35583ca13ff8cf36f861503d51052770153e87c1fcd8f8aa41ac17426a43c8194093b8f21a1d6d9257e8c5ba981494595d8e48e43eb", 0xde}, {&(0x7f0000000e80)="341841800d52faa2c40b1737e07cc67559737357b5a767448b3054331595395ea832884e8c4e2767ec245b4b97b0ed63a83dc44e17cebc2d183b0c4fdba5eba97725c16dfdb5371d1137999853beccf85923594299822933dfdadb8db79d5c431fd08603f229f0928520dde0522a3fe50d038581fb2634deccbc9fdfa5ad3893d1bab132149b62418bddffcd0174016592f7b48e21a0896f3727da8ac7ae33224686b4fd2775ba83e74b73b4d599e6bdff8c0528f1fe0773a4be3ec62bd7045d95a1ed941265486bf221b918dcfe41a9c3293d162cb9aecb158f973e0e68d24080333fe3ce10010a0f03a2620821c493988c65e7d88c0de6d8a9bd8e12104f3a3c02803d638bd377202f946e139051319e8f484e46398bdecf16166bbcbec11b456e0ee75493893579c9100c649a65a4d866b047e858e6a23f3aaa5ea17ee72e009a9798eb18d44ad482c35f2012e84a592c08d450db6126e60ca833330553d884444db87bff66c43681e23d803d9140ca7c5884959cb74763334b61c730272f63e7ef68fda9e5629ec64b21efb96a23b093d5e1d1a6f0ce1e688a9acddf26b2a8448791818831a20e87443d957f5c569159c8e3748a12f5cb0453fb0dddecdbdb9e2fd9d9b7b263046d1d67d98aec07a94cd37c961f78c61ce70983ab81a2083d5ce95a632b56acde666bfcc3c425711e80572c7204165129edcfc7257d3423ee55a2745938d8bf02f8a74f5ad3b35bea7ec6d9239eb3d8192efda8f07dd57fcc6fc7a97ae9fce162992915f7b02e483148431f3acb94dc1ef5e8de9bee3f80664d8c54836aecefddcf5b4c357ba465bb5b4318e130adad2e62c5ae091c171c639aad16264a7e2632fd4389affa7bac4bf79b0360e343f1f58bb4f8d3ba9c3a7352cbe4d3bd04a46cbe7ee311b493d06c28360636b9d6fe9eaa1626c6db62e1497100d29609c30206b800de589ad87fd502872014abbb117ce914fcdbf2c37c26175cbb0c651d9715a8e5a5254cc3fade611f2aff0e957e1fa44dc215111ebec15a7ee817f86004a41bb50af7ade63400f1ea0bfaec9b8dd4b9f132aaf7e66cf7d37e7fa22c87fe9c9da1a4610c3a33b0f37d937260ab7c7d41bfd2275f3149fcd712d93e6c0aa5fad247d9a6312799a80986f46228b51271fad7387dcaf1af7c702c112f3bd6a3e0c057f1ff5f82d70ccb3465e09150c5999b5e6e5c84b5e0683b98a7a4b4a8cedcc2d1d93f5b4eb6ababe9f44fb1294d3c496800487116c01b5adff096e918bdba06971892385e74a02399b33dba5f44de171d2062f8e3946a03c1221e0b03ab81610a3639ae26bb0e514551aef730a90eafeb34e3ac725dc423bb02207a70f2925f2794396c328ef97f9cf258c4ac80ca6109acd64d7b27e2cdc91dd4e57133456bc63c7b7f35ce51973c4f8e08c77e6c2fb583ea1d5f8f7987836c932c8ea91418f786b2074d78c5c0b6f20ab4215302f098ae824de716d2dfcc574a24c3b0e99ba8985d1466da95d054a8f8b733268d0356f35a493a64f59263e920b8d59479dcf69afca33b0f30d39d9e16458d0091af887d6e3483712dae408d9db85053be41ebb84210dfa05e2e15bc45578dc2fdda6bc15714da1b25735463de4b938ce7665e60b177b947095e7919bc2ac636b2a3e43207d2b8c5c12d771d1e2aaa3d133a63529b065e9eefae1ba253ccb8320d4710135351ca8955bc676c9b2c1e62a752399b2f5e59be555f271be6646b657d4757fb4ed5a6a6e0c4646faf5c69183f49451b606a1ee84f19d300d7aae30fde5b918c18de617e405269d259520ace366c0d0e1dc39d359200a897174f3d0a932914d2787683738f227bc358274c37fbe795befb4548c677f20acc66e0a3e355365dbeaa7cd2283513b86ba158bbd742420d4da0417d3a56e09d5ed6bb46a94d6a0fa192e30f33e3ae5340ca9e43299d3254ea8aa9683364aa41b2ee4935ce947d141318735adc777107532850fd879444b311f37fad8325ac68b78c935e0486bf9edc2ba22735b83570a85592cea6f70a94e4928aa9c490f59258af6eef43d871a9bfd651e6c7da8755c057fb9b95f5de214f6ea10776353fb1b61ec57a5bab1052810c451f7418354fbe05fe21266b155fea33ad4a47c97a78a1290ea0482f5c6aa71444fe88eb103bf20cdb556570e891cb3b3e9970d086a318ca89fc187d22a1f1ba902061584d03c8128741cf69bbbe4e3fab047df22c14d38804a8179905936b0c776c2a94410fdeb2d714e84e1b73d93ee04b24bf7163467469d62707f8c5f86b00d1f7c2da4c318a64655bc245f1c2a9df5bd5f39aa15df5ecf1461a36e1d63772bf3a1331028cd7b2f91f6a3d1672277f4eefaccb1aff0b5b778b8beb380e5a2de4a215899688706227d7e17d5a9b8066b2570956d386ede2935f568088031816fbd672d0832f1100c2ad85c32aebd0b6f145f5ef449b18e5bd986f60a0786449bc2de98aa29002b15162c10a7004f9c68d28d2914f0be9cc35d4ca504867bcec730c74419896cbd34cb38293ae06ad72e3ed3607b38ebfc40d63ac81fce41c06c7ef2d38f23f45e8eba36bb6bdd04f134e76c18069e92c7eedbf16c1b60d23e652e541569bc430f11de761de20f4d62a5fbc436841e68995e7f243dfa88bb79f5f8b772943bc987e370d941506e3bb093563f76a726380c86ff984d6186a382d52ebf86f5df9854124ed2db0f5dd1b8038372c1dfe686c7b954f56c7fbc1eefaa783036437bb57c633bacd9838d850d8683a83b3e76c44b60b7541f01fec7e909a95055d969e24310c3092aa6a12ad814a6081b483717846ce562b99d6425f2a9269b6fd436ceb156d52dc237293f812cce2d952412f2460b6d82160e79ca620fc455e4239a49eb7722dde5f34dbf266b10302079a4705bb1724252b5385579439bd758cc70b8a5a5a0342cdd06b86237cfc2edeef1004c04497b3be38ca156e8767ab113e6ee84da559d476abeaba6e2d1b5fb9f8c5d3d0394d43cb863438d4b34bcd7f5b4ec2dffb58dbd5abe3ca51102f121b420e459597b42f3606c174dc6b8eb1fb3384ebc297d8b5422557163daa45170c42e6fd2d59bef2c11b015487abcd783cfbb0408163e36bc9a139a1391f67f566abac252eee3ab29391a4d921d02a15cfe472d1aa12cdba33b2c8cbda658d2fa7ba8b8b167826677480a2856cbc5d9283405a2372663894410bfec2ad1a3f35d0fc4ec762a1f83d1531cdc1dcb5e26b6fdab1914c3797567bfb67025977059b32c927863117c9ad67624df1ed3d24d48536ab47c7689de84f17233c49d92fadb927dff148f3c963e34635b442506687d16ef1c2562205a124c23190a3975af8fb1d273a1e216fa91cde68d62e7aa25df84fc3991f84bce0f2d234a71cc1e953800d1b12d042a7d9d8b9c8e991413d67055b87f73138036bec0655d5c3522c0e1be45f02d982ae9a6c4f493e6822eb9cb2d172d71b15ba9d13b5f12cb443ee35ba2384462773a7c3145559d900c597903923432a5c3b824fb9774cad0f85c7948733653a40a496a4d39debf61ec55dfc8da03fccb003a5d65c519b22bea4e97a90ecadd6b9c2bc009002faf869311da36d8c5415fa1c6e9176ed81a62917389553dc1f689dc1798875677af79dee7d6231d0ee599362aa73187a10ce3b4ebed857f7aff2161e9436be92764ecfb3902cf12613f55e9ad0ecd6763e4781252ab8c8009352782e436589c068528ce8f59d329fbbdfad4b00ceddf7d0ce88327ca9f83f557eb143aae733782ac9e1d937761b8c98756dd38575aa433fec668e6f1c561560483bc8ebc1a4b61cc45c2afe3d4d89cdada732562445560ab76b8482a59478a443116858862348eec6dfff106e9008e56441804f7c6ef71fabea30d8b2d34769d8c2116ab8557aeb29189d36c3c70c1e27d21959d9ca2bb328a063dc6a3f739e6d266ef667f25ea523cd8b1c2576402c2e3a9c2d85a2c9a33318d126844f19b1830334cf02221bc7a276532c0779c5adca7a6b7cad3b3e33545d2b1e251dbd5c04d1bac91ef3baff7c8a99e04219b21b21584fb2d542bd5523680ee861293fed769656d8e51ea3381bfc63909a937a92df8a1085bf61f0c3c1ca928427675a26edf677f967312ae9be0cac0602e0a3871ce74e2bfafe56b473a31087f19dfa7de069373768bcdff8823dcc16418b48d8b66a416a0f83d647bf5bb723f95a74c4ebcf17db7302ae2d39310ee17af55711c3c7cd484b5958ef0b88c952917cab1bb6a7e95a273637e1b1ec2798dd0d5a3e9a11c57c57bfab50ae7c45ac52a8270ff8a980b3c52913691c4a8cff8e3bb24bb982e10b091de48a5967bcc1d749fb8654a2e15f41dbfca3a4f9af625fa793440dbe858488796fc9d6283ee8b43ade00ee6e1110504b26345119bb28acc55d890c077790266f8fddbd217313712ec789d4e4144f42d83cb6be5486b255ed7d54e89305e84fd39f49613234f8e377b3e32fa00499fa27dbe860b048f4b6f855b4ba4fa0ea11e141f8250cca845ef98f969d3a7b84ea8d74a58326333d7817b0f0dc7b39240ddffb2679a76785de411e9b51e5aea7f3cfeb28d3a85155569916537237cfe5b86bd37cb56baeb7dab94ad6c30671b57bc38321d1e4bf3f6d1d142188892c5f046b762348405c43eff36ea37a63fc86200ddb6fadd97a82fadb75d5b72a00a5f91c34cad5a0cc319307e0f55c21db682f510caa6a59782a52df2e5fc8d4f25ece39fba78ed5d16235a7106c061f293ed9036598e2745f01b0c05906d208c8ebda7bff4fd4b4f526671f64cab07bfdde838414b3aa493d998ab15bf6c370119af20c7c6fce907b0a016e9f00571d62080a6a9a42bfb55f3b72a9257d5e9a1db2d4395a2f468bcf6d1273545a857419bedecce1be83beec0d9e1114b1eeecec51c6a7e2980d910f9466b804268733541e42b1181622dd38021959d3fd26616a6d08e493adf2652d78bcb0c0034ae9303717e35491886271b0977d4066bd11326cb4d277f6c4e16cb1dd689bf48abfc1951be464f86015569dce37cb240dbbcd0c09f7549bca64fd74dd6ea061a4ce0573a8a74a6dfce3824726eb19a3bd2a6927c18741173334ab0aa6fefbe406b12e1995061bad93b56dae6f90e6ab7dcc9b80fd845314142720b1a9d8cf51af53bc8d15ede41b9961b48462196b1d4d918607fc680f6e1a670a15e28538af98a5d05376eeb020697ef2dbb194b2acbfdda1eb827934706bfd9e137651a913ec70aa6dfdfb6dab4902b37b326ffd6162fd043f2d6ea99edff7d25d3c659ae895033c2f29035ea1ed94436481e40cecb98d1ba3f1e2fa794857d61b79cc3d039e2afb6594e4ccf35e3a5ae37011647a53ead4421958dc7a9d53e6d0a92713dea139961df92977fa1df71ee4c88e597770c3e4cf74160adea0c89a35dfecd31c0abc62c1dcf51f28441bb9530ef3c2139874b3bede7b2400d8aa9b5c0071c1dcaa2fe0e5ea44a812fcf2731928bb1f846e331033850b2963eeeff95ca1dd33600e7a53bc8ed9f400ed8faa1a8d1fad867baff8b5aa49b8b9bb6692488b420fc83f28f9b659081379c793925cf511e500848a039f8d71953ef63ae02782c200b9cce81c7befe71116e4caff4ed3cf577c1cb45b84e8fc4a42603e281a9b9739aedc60dc88c3422154e71d905c0f975b5e59a79d2e3ba5722c31689e45d321e564091c95250e8b25ba2fa89248c59e499b9dbbdccf9eef13137e2da76c57c56beaee6ca9b20efa165f388a6185", 0x1000}, {&(0x7f0000001e80)="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", 0x1000}, {&(0x7f0000000500)="49180f73c65c875fadd7faec9b933f3f85809408c8a0c4801dd94986c2e2c78b41c5a540b73529d25906677eaa67ddb82fa432a44451aaa0a3370ae62ff48eddab8b7905bf7817472080e7c557cf4dc326559ff0a7454f57423a98def2be83e782fecbe26aaf8189b38905a17460776178e2365ee4934554b5b6b54d3b386c686d17a7798c8112ec4ab6b3", 0x8b}, {&(0x7f00000005c0)="c7801104865e4df3e9324fcc3a439ceed40322adda007d3dd27912bc103c0f6fe235640d1477c94826e6a33ad2080481901581756c169b92e0221b5ed48cd89e0ee54af53ada93345dde2b0c8d95f70d9b9825663696f5af0f491d2b5b87779b72877a2154fc832018d074be6f88764383a4673e29d5741dc81719e005783a33b9bd3a2a258d873100032a6228b3acb4cc5ec29fa2baf2276cbdf3aa3b3d8c68", 0xa0}, {&(0x7f0000000680)="4c36feebb1d589e5d018a3ed948f0f68c65a1cf3dccc865392e98539d60cccff5b7c0bb39d09447b74c21fb60b379e35b6f90b7c70448bbb9b8f135c7b400d919af16d218f7e9e8a9571f87c92d21c5edbc98d18edf6821614ae4f2a578852d45f98f3e7856c701537abdbb87fdd6435c005a9046ee63a7c8ff2c1742e8a5f19585e317726954326ac65d7347f3a42416923bc46", 0x94}], 0x9) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340100d3", @ANYRES16=r5, @ANYBLOB="010000000000000000002b00000008000300", @ANYRES32=r6, @ANYBLOB="04004600040051800500340056000000080026006c090000"], 0x34}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 22:54:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 719.717738] audit: type=1804 audit(1633647299.953:840): pid=22654 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1380/cgroup.controllers" dev="sda1" ino=14034 res=1 22:55:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0), 0x400, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@cgroup=r0, r1, 0x9}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 22:55:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x4261f, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:00 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) [ 719.833525] audit: type=1804 audit(1633647300.073:841): pid=22721 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1508/cgroup.controllers" dev="sda1" ino=14695 res=1 22:55:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0xe00000000000000}, 0x0) 22:55:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x42620, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:00 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) [ 720.128467] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r1 = accept(r0, 0x0, &(0x7f0000000040)) getsockname$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x10) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) [ 720.280464] bridge1008: port 1(vlan539) entered blocking state [ 720.301119] bridge1008: port 1(vlan539) entered disabled state [ 720.334031] device vlan539 entered promiscuous mode 22:55:00 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 22:55:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x42621, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x1000000000000000}, 0x0) 22:55:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) io_setup(0x5, &(0x7f0000000040)=0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x4a0080, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r7, &(0x7f0000000040)=""/46, 0x2e) getdents64(r7, &(0x7f0000000080)=""/66, 0x42) io_cancel(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x8, r6, &(0x7f0000000200)="33f4e483f32f925ead198f39c537976286159d77188c41567b9b6015fe7ed0263839533fd0786292d86dff59c5074a987c4f22dce0761b15c13f1d62762d81cae4d9e88bb6a57e8f795f876cdbb9e3db860af98a5f85315a68b57b2db148b4bbadda1a32fc81cd581e698f76f9bc32e0274812bc8e9619e9e64d1067230a0ea55513", 0x82, 0x3b400000000000, 0x0, 0x3, r7}, &(0x7f0000000100)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="30000884a882cc039c18a7557862285459cc57d250a3f400587b12e184d996d0086643d68940c830b634f37021edc289867c79dcfa8527d28ac0f7ac9b872858c201d652aaec498a36c90c11bb9a23d48d203ef2f683786190ef3eb9d5ab907cdc2e957d7f1a53f8e9715a11768e9924372bfaaebcb87d6e0c13ad12cb80b0aef692ff22d160d9a4a23943be832e13c9b85532a072443af345972d1513c843c7d34a1b5614000000006b2e99474adcc7e1b1def082e2d5cf55dd0ba505de23cb60ab74c79a1112e7da7364740719304d48f44869f0e2be8c482c20da5d983f703b2faef763b429aafec97d1ad7fff0cca379af407791c10cd2e53dd0dd7aaa72834b65d59773ee7f07f73cd2d99ad292f88da148fec6b0f4af6899bceb1ed66a9e606154f4bf9fa996ea73100a5f6e1aacb8d398e5bee32ad42ef5280bda4570230449b02e4cd9e7c2652effbe3e63ef7a4a9a4df1cc61a999e12e0c9977706e8491fa2644964d0cc89a984bcb401a6765b31fa89594bc887977cf2384559c2544ac3151f0a676fac0171a51d5750d028829ac5ae0dad02384800255f2167771b821784cfac33ddec688d728f0fd2e55edb2725bf18e7ad1aa312cafd8aa12bb35e648a0d9c4374aa877e4df947f36f47193a02b64132ff0ac88a4e5a57a577c5285cc", @ANYRES16=r3, @ANYBLOB="010000000000000000002b00000008000300", @ANYRES32=r4, @ANYRES16=r7], 0x30}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 22:55:01 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 22:55:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x42622, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x30, r3, 0x300, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]]}, 0x30}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x22) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x100, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x20000}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@gettclass={0x24, 0x2a, 0x4, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x9, 0xfff1}, {0x1, 0xffff}, {0xfffa, 0xf}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8890}, 0x4000000) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x10d000, 0x0) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, 0x7, 0x6, 0x201, 0x0, 0x0, {0xd, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffffff08}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10001}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x88800) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x260900, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r3, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@device_b}]}, 0x20}}, 0x4000) [ 720.995045] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 721.124454] bridge1011: port 1(vlan540) entered blocking state [ 721.139577] bridge1011: port 1(vlan540) entered disabled state [ 721.150497] device vlan540 entered promiscuous mode 22:55:01 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 22:55:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x1fffff, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002b00000008000300", @ANYRES32=r4, @ANYBLOB="0400460024007e004e28aabc6d3484ef71e50887e5ae4df1712e7320b7c0716961768f74e1544d3a080026006c090000"], 0x4c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 721.326681] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 721.531943] validate_nla: 28 callbacks suppressed [ 721.531953] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 22:55:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x1031afbd00000000}, 0x0) [ 721.614543] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 22:55:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:02 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0xce0c0000}, 0x0) [ 721.762827] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 721.799572] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x200000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:02 executing program 5: r0 = socket(0x200000000000011, 0x2, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x32001, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r3, &(0x7f0000000040)=""/46, 0x2e) getdents64(r3, &(0x7f0000000080)=""/66, 0x42) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendfile(r6, r5, 0x0, 0x100000002) [ 721.934513] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:02 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r4, &(0x7f00000012c0)="0d268a927f1b6588b93e480b41ba3860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd60da03059bcecc7a9544fa3a07e758044ab4ea6f7ae56d88fecf9141a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 722.152144] bridge1015: port 1(vlan542) entered blocking state [ 722.170271] bridge1015: port 1(vlan542) entered disabled state 22:55:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000080), 0xc) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 722.194130] kauditd_printk_skb: 5 callbacks suppressed [ 722.194144] audit: type=1804 audit(1633647302.433:847): pid=22879 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1511/cgroup.controllers" dev="sda1" ino=14735 res=1 [ 722.231132] device vlan542 entered promiscuous mode 22:55:02 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 22:55:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 722.300936] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 722.332694] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) execve(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000240)='wlan1\x00', &(0x7f0000000280)='\\}[-\x00', &(0x7f0000000340)='wlan1\x00', &(0x7f0000000380)='wlan0\x00'], &(0x7f0000000480)=[&(0x7f0000000400)=']+\x00', &(0x7f0000000440)='wlan1\x00']) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x63, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}, 0x25}, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x70, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x3}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @NL80211_ATTR_IE={0x3c, 0x2a, [@ibss={0x6, 0x2, 0x1}, @peer_mgmt={0x75, 0x16, {0x0, 0x54cd, @void, @val=0x11, @val="e324fb01e17f815e3067937b2d28200e"}}, @link_id={0x65, 0x12, {@random="3c8d2dc0d599", @device_b, @device_b}}, @cf={0x4, 0x6, {0x1f, 0x2, 0x4, 0xa97}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 22:55:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 722.415124] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 722.563489] audit: type=1804 audit(1633647302.803:848): pid=22892 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1385/cgroup.controllers" dev="sda1" ino=14738 res=1 [ 722.574795] bridge1015: port 2(vlan543) entered blocking state [ 722.670288] bridge1015: port 2(vlan543) entered disabled state [ 722.715111] device vlan543 entered promiscuous mode 22:55:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x6000000000000000}, 0x0) 22:55:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xf0ffff, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:03 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0xfcffffff}, 0x0) 22:55:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 723.002081] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 723.031091] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) getdents64(r0, &(0x7f0000000080)=""/66, 0x42) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) r5 = dup2(0xffffffffffffffff, r2) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x3, 0x7, 0x301, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFACCT_FILTER={0x4}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7fffffff}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x8000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02000000", @ANYRES16=r6, @ANYBLOB="010000000000000000002b00000008000300", @ANYRES32=r7, @ANYBLOB="040046000800a1002000000008009f0005000000050018010b000000080027000100000008002600c00200000800a000fcffffff080027000200000008002201120200000800a0000200000034005180300000800800030000000000040006000400050009000100a2985fa3db00000004000500080007000200000004000500"], 0x9c}, 0x1, 0x0, 0x0, 0x44810}, 0x8000) sendfile(r3, r2, 0x0, 0x100000002) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x1c}}, 0x4800) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r8) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x58, r9, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffb}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xa3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe3a}]}, 0x58}, 0x1, 0x0, 0x0, 0x1c2a5c5bdeb45510}, 0x4) ioctl$LOOP_SET_STATUS(r8, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x7, 0xf45c0bc513a97213, 0x5, 0x1c, "ae6fa71b7325b159395e28ea020b12a4f705f03e5f001bdf639738753defa0b097b1544f83f6ddc2a6b834c785f2314f5dbb2c816e871f5923c7248ab33e7491", "b51ec0f5df0b98245ea4e13f6edfa89bd8da44157fd95889e060e32d2d7f1a76", [0x8, 0xd5]}) [ 723.263824] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x1000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r3, &(0x7f0000000040)=""/46, 0x2e) getdents64(r3, &(0x7f0000000080)=""/66, 0x42) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r4, &(0x7f0000000480)='cpuacct.usage_sys\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r5, @ANYBLOB="01f7ffffffffffffff002b03000008000300ff89c93c6511f085baeb", @ANYRES32=r6, @ANYBLOB="04004600640051803c00008008000300000000000500020003000000100008800800070001000000100004006bcd40052778d03a26ba96c7befe00800800030001ac0f000800030001ac0f0008000700020000000500090001000000050034005600000008002600f4150000"], 0x94}}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000400)={0x2, {0x0, 0x3, 0xffff, 0x4, 0x1}}) r7 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x9f, 0xd2, 0x7, 0x9, 0x0, 0x1, 0xc, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x10001, 0x2}, 0x42000, 0x100, 0x5, 0x4, 0x800, 0x3, 0x40, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x7, r0, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000240)=0x5) sendfile(r2, r1, 0x0, 0x100000002) r8 = socket(0x11, 0x800000003, 0x8) bind(r8, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000003c0), 0xc, &(0x7f0000000180)={&(0x7f00000006c0)={0xe8, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7993}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x0, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x0, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010141}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0xff7f, 0x6, 0x8}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) [ 723.474040] bridge1018: port 1(vlan544) entered blocking state [ 723.503486] bridge1018: port 1(vlan544) entered disabled state [ 723.542086] device vlan544 entered promiscuous mode 22:55:03 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:03 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 22:55:03 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r6, &(0x7f0000000040)=""/46, 0x2e) getdents64(r6, &(0x7f0000000080)=""/66, 0x42) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) getdents(r5, &(0x7f0000000040)=""/46, 0x2e) getdents64(r5, &(0x7f0000000080)=""/66, 0x42) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 723.637537] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 723.644937] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x1260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 723.741011] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:04 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 723.941572] bridge1018: port 2(vlan545) entered blocking state [ 723.984445] bridge1018: port 2(vlan545) entered disabled state [ 724.033957] device vlan545 entered promiscuous mode 22:55:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x6558000000000000}, 0x0) 22:55:04 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r5 = socket(0x3, 0xa, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffff8}]}]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r6 = socket(0x11, 0x800000003, 0x8) bind(r6, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, 0x0, 0x63, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @void}}}, 0x28}, 0x25}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9c010000b8a9e48260a681f1df49855e31135887401e02e7f659471ee66ec068387793e95e2b8490930bb83fc3bbd30d0feed7ba8e3e223f93ca4bde2a750f4db86e82b9724c314e2242050e650b69d11b58b5a47a116a8aeb9f9acc25efbfce7c9e90f924a40631c9780f8d7efa31eeab67dd3357715bff9003064fde768d69095deec79ecdb81491fca4324bcc79fa5f8759634de25a467e336a8c65e38f1d576db26e98c72c0557fb4c4ec038787cd8800db9aea952104cdb283ad6d83cd1f14e7fd7a43d4c42c6ae218bf47a44e6ccf2cf467d1cea2c8464aebcffc3b80ad32fb62633a6a20e15418ceec69ee57d625b20", @ANYRES16=r7, @ANYBLOB="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"], 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0xc081) 22:55:04 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 22:55:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x2000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:04 executing program 5: r0 = socket(0x9, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x498, 0x98, 0x308, 0x220, 0x0, 0x220, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, &(0x7f0000000200), {[{{@ip={@multicast2, @multicast1, 0xff, 0xff000000, 'vxcan1\x00', 'caif0\x00', {}, {}, 0x29, 0x1, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@loopback, @loopback, 0xff, 0xff000000, '\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0x29, 0x0, 0x4a}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x8cdc, @rand_addr=0x64010102, 0x4e23}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x11}, 0xffffff00, 0x0, 'team_slave_0\x00', 'veth1\x00', {0xff}, {0xff}, 0x62, 0x2, 0x19}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x1, 0x2}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x6}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'ip6_vti0\x00', 'ipvlan1\x00', {0xff}, {}, 0x11, 0x0, 0x42}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1f, 0xede, @ipv4=@multicast2, 0x3ff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x4, {0x1, 0x3, 0x100000000, 0x0, 0x515}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d40)='/proc/key-users\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x40, 0x140b, 0x0, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000001340)="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", 0x1000, 0x0, &(0x7f00000001c0)={0x2, 0x4e21, @private=0xa010102}, 0x10) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x23, 0x40, 0x6, 0xa20, 0x0, 0x5]}, &(0x7f0000000100)=0x78) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={r0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 22:55:04 executing program 4: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 724.400465] audit: type=1804 audit(1633647304.643:849): pid=22985 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1513/cgroup.controllers" dev="sda1" ino=14745 res=1 [ 724.525090] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 724.552231] audit: type=1804 audit(1633647304.743:850): pid=22997 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1388/cgroup.controllers" dev="sda1" ino=13963 res=1 22:55:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x2260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:04 executing program 4: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 724.702002] bridge1021: port 1(vlan546) entered blocking state [ 724.724361] bridge1021: port 1(vlan546) entered disabled state 22:55:05 executing program 4: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 724.752904] device vlan546 entered promiscuous mode 22:55:05 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) [ 724.818630] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x3000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 725.023532] bridge1021: port 2(vlan547) entered blocking state [ 725.049737] bridge1021: port 2(vlan547) entered disabled state [ 725.088169] device vlan547 entered promiscuous mode 22:55:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x8100000000000000}, 0x0) 22:55:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 22:55:05 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000780)={0x3, &(0x7f0000000280)=[{0x0, 0x1f, 0x5, 0xfff}, {0x535e, 0x6, 0x1, 0x9}, {0x800, 0x20, 0xe8, 0xffffff51}]}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x40) fcntl$F_GET_RW_HINT(r7, 0x40b, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x0) 22:55:05 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 22:55:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x30}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 22:55:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 22:55:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x3260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 725.393597] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 725.463253] audit: type=1804 audit(1633647305.703:851): pid=23061 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1389/cgroup.controllers" dev="sda1" ino=14749 res=1 [ 725.553271] audit: type=1804 audit(1633647305.753:852): pid=23063 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1514/cgroup.controllers" dev="sda1" ino=14750 res=1 [ 725.590740] bridge1024: port 1(vlan548) entered blocking state 22:55:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) [ 725.633286] bridge1024: port 1(vlan548) entered disabled state [ 725.688906] device vlan548 entered promiscuous mode 22:55:06 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0xfffffffc}, 0x0) 22:55:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) [ 725.759669] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x4000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 726.008652] bridge1024: port 2(vlan549) entered blocking state [ 726.068361] bridge1024: port 2(vlan549) entered disabled state [ 726.111890] device vlan549 entered promiscuous mode 22:55:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 22:55:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x88a8ffff00000000}, 0x0) 22:55:06 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000740)={{'\x00', 0x3}, {}, 0x1, 0x0, 0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x200}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r6 = fork() getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/66, 0x42) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x0, 0x3, 0x43, 0x5, 0x0, 0xf2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x80110, 0x3, 0x1000, 0x6, 0x2000000, 0x2, 0x0, 0x0, 0xff, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0xf0144253df1b1d06) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r7, &(0x7f0000000040)=""/46, 0x2e) getdents64(r7, &(0x7f0000000080)=""/66, 0x42) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) kcmp(0xffffffffffffffff, r6, 0x3, r7, r1) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000021020000002b000000080003001468516c529dc8bfd63d289a2b51ddd0333cf589dc2a7ca459a6c06b5dcf8af8eb4aabcadc931377e1d66e5dc164b3efb83f88e4670b4c96efedca64d47b784e6b58de1abbe588cddaabb92d06efd5a5d820b2c95b599f0e89beb7", @ANYRES32=r5, @ANYBLOB="040046000500340056000000080026006c090000"], 0x30}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 22:55:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r5 = socket(0x3, 0xa, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffff8}]}]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r6 = socket(0x11, 0x800000003, 0x8) bind(r6, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, 0x0, 0x63, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @void}}}, 0x28}, 0x25}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9c010000b8a9e48260a681f1df49855e31135887401e02e7f659471ee66ec068387793e95e2b8490930bb83fc3bbd30d0feed7ba8e3e223f93ca4bde2a750f4db86e82b9724c314e2242050e650b69d11b58b5a47a116a8aeb9f9acc25efbfce7c9e90f924a40631c9780f8d7efa31eeab67dd3357715bff9003064fde768d69095deec79ecdb81491fca4324bcc79fa5f8759634de25a467e336a8c65e38f1d576db26e98c72c0557fb4c4ec038787cd8800db9aea952104cdb283ad6d83cd1f14e7fd7a43d4c42c6ae218bf47a44e6ccf2cf467d1cea2c8464aebcffc3b80ad32fb62633a6a20e15418ceec69ee57d625b20", @ANYRES16=r7, @ANYBLOB="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"], 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0xc081) 22:55:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x4260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:06 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 22:55:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) [ 726.453383] audit: type=1804 audit(1633647306.693:853): pid=23117 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1515/cgroup.controllers" dev="sda1" ino=14744 res=1 [ 726.651817] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 726.764034] audit: type=1804 audit(1633647306.823:854): pid=23109 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1390/cgroup.controllers" dev="sda1" ino=14747 res=1 22:55:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) [ 726.885011] bridge1027: port 1(vlan550) entered blocking state 22:55:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x5000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 726.939886] bridge1027: port 1(vlan550) entered disabled state [ 726.991796] device vlan550 entered promiscuous mode 22:55:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) [ 727.129749] validate_nla: 10 callbacks suppressed [ 727.129758] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:55:07 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x2) [ 727.164190] audit: type=1804 audit(1633647307.403:855): pid=23118 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1390/cgroup.controllers" dev="sda1" ino=14747 res=1 [ 727.255753] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x5260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 727.324538] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r5 = socket(0x3, 0xa, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffff8}]}]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r6 = socket(0x11, 0x800000003, 0x8) bind(r6, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, 0x0, 0x63, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @void}}}, 0x28}, 0x25}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9c010000b8a9e48260a681f1df49855e31135887401e02e7f659471ee66ec068387793e95e2b8490930bb83fc3bbd30d0feed7ba8e3e223f93ca4bde2a750f4db86e82b9724c314e2242050e650b69d11b58b5a47a116a8aeb9f9acc25efbfce7c9e90f924a40631c9780f8d7efa31eeab67dd3357715bff9003064fde768d69095deec79ecdb81491fca4324bcc79fa5f8759634de25a467e336a8c65e38f1d576db26e98c72c0557fb4c4ec038787cd8800db9aea952104cdb283ad6d83cd1f14e7fd7a43d4c42c6ae218bf47a44e6ccf2cf467d1cea2c8464aebcffc3b80ad32fb62633a6a20e15418ceec69ee57d625b20", @ANYRES16=r7, @ANYBLOB="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"], 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0xc081) [ 727.606441] bridge1027: port 2(vlan551) entered blocking state [ 727.683961] bridge1027: port 2(vlan551) entered disabled state [ 727.697479] device vlan551 entered promiscuous mode [ 727.742000] audit: type=1804 audit(1633647307.983:856): pid=23165 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1516/cgroup.controllers" dev="sda1" ino=14614 res=1 22:55:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 22:55:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x9effffff00000000}, 0x0) 22:55:08 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x3) 22:55:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x6000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 728.013085] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:55:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 728.073736] audit: type=1804 audit(1633647308.313:857): pid=23174 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1391/cgroup.controllers" dev="sda1" ino=14761 res=1 [ 728.084741] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:08 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0xf) 22:55:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r5 = socket(0x3, 0xa, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffff8}]}]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r6 = socket(0x11, 0x800000003, 0x8) bind(r6, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, 0x0, 0x63, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @void}}}, 0x28}, 0x25}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9c010000b8a9e48260a681f1df49855e31135887401e02e7f659471ee66ec068387793e95e2b8490930bb83fc3bbd30d0feed7ba8e3e223f93ca4bde2a750f4db86e82b9724c314e2242050e650b69d11b58b5a47a116a8aeb9f9acc25efbfce7c9e90f924a40631c9780f8d7efa31eeab67dd3357715bff9003064fde768d69095deec79ecdb81491fca4324bcc79fa5f8759634de25a467e336a8c65e38f1d576db26e98c72c0557fb4c4ec038787cd8800db9aea952104cdb283ad6d83cd1f14e7fd7a43d4c42c6ae218bf47a44e6ccf2cf467d1cea2c8464aebcffc3b80ad32fb62633a6a20e15418ceec69ee57d625b20", @ANYRES16=r7, @ANYBLOB="00022bbd7000ffdbdf25180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b000500000006001600002800000500120001000000060011006100000008000b0009000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000000000006001600cb0000000500120011000000060011008000000008000b0005000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b00450c000006001600060000000500120001000000060011000300000008000b0000f0ffff0e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b000000000006001600020000000500120001000000060011000700000008000b00010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b000400000006001600000200000500120000000000060011000100000008000b00b0b20000"], 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0xc081) 22:55:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 728.477806] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:08 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0xf0) 22:55:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x6260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x439}, 0x20}}, 0x0) [ 728.691902] bridge1030: port 1(vlan552) entered blocking state [ 728.741415] bridge1030: port 1(vlan552) entered disabled state [ 728.798256] audit: type=1804 audit(1633647309.033:858): pid=23179 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1391/cgroup.controllers" dev="sda1" ino=14761 res=1 [ 728.852080] device vlan552 entered promiscuous mode [ 728.944309] audit: type=1804 audit(1633647309.073:859): pid=23201 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1517/cgroup.controllers" dev="sda1" ino=14759 res=1 [ 728.990130] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:55:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipmr_getroute={0x1c, 0x1a, 0x200, 0x70bd2b, 0x25dfdbff, {0x80, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x2, 0x1400}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44084}, 0x4000044) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendfile(r3, r1, 0x0, 0x100000002) 22:55:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x439}, 0x20}}, 0x0) [ 729.021863] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 729.117421] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 729.186938] audit: type=1804 audit(1633647309.423:860): pid=23229 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1392/cgroup.controllers" dev="sda1" ino=14002 res=1 [ 729.218618] bridge1030: port 2(vlan553) entered blocking state [ 729.230439] bridge1030: port 2(vlan553) entered disabled state [ 729.271316] device vlan553 entered promiscuous mode 22:55:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0xb44d6c9100000000}, 0x0) 22:55:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x7000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:09 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x300) 22:55:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x439}, 0x20}}, 0x0) 22:55:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r5 = socket(0x3, 0xa, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffff8}]}]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r6 = socket(0x11, 0x800000003, 0x8) bind(r6, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, 0x0, 0x63, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @void}}}, 0x28}, 0x25}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r7, 0x1}, 0x14}}, 0x0) [ 729.562695] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 729.607968] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x7260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x63, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}, 0x25}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x34b3, 0x52}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r8, &(0x7f0000000040)=@isdn, &(0x7f00000000c0)=0x80) sendfile(r2, r1, 0x0, 0x100000002) [ 729.817969] audit: type=1804 audit(1633647310.063:861): pid=23256 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1518/cgroup.controllers" dev="sda1" ino=14766 res=1 [ 729.856174] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 22:55:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x8000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x2010, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x63, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}, 0x25}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 730.113216] bridge1033: port 1(vlan554) entered blocking state [ 730.141263] bridge1033: port 1(vlan554) entered disabled state [ 730.160433] device vlan554 entered promiscuous mode 22:55:10 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0xcce) [ 730.242228] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:55:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) [ 730.296571] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0xf0ffffff00000000}, 0x0) 22:55:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r5 = socket(0x3, 0xa, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffff8}]}]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r6 = socket(0x11, 0x800000003, 0x8) bind(r6, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, 0x0, 0x63, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}, 0x25}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x8260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 730.421266] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:55:10 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0xf00) 22:55:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 22:55:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x9000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r5 = socket(0x3, 0xa, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffff8}]}]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r6 = socket(0x11, 0x800000003, 0x8) bind(r6, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, 0x0, 0x63, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}, 0x25}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 730.762398] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) [ 730.962710] bridge1035: port 1(vlan555) entered blocking state [ 730.980017] bridge1035: port 1(vlan555) entered disabled state [ 731.021089] device vlan555 entered promiscuous mode [ 731.031731] audit: type=1804 audit(1633647311.273:862): pid=23330 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1520/cgroup.controllers" dev="sda1" ino=14761 res=1 22:55:11 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0xce0c) [ 731.144798] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 731.192930] audit: type=1804 audit(1633647311.433:863): pid=23293 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1394/cgroup.controllers" dev="sda1" ino=14768 res=1 [ 731.371840] audit: type=1804 audit(1633647311.433:864): pid=23296 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1394/cgroup.controllers" dev="sda1" ino=14768 res=1 22:55:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x80) openat(r1, &(0x7f0000000100)='./file0\x00', 0x200000, 0x46) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) sendfile(r3, r4, &(0x7f00000007c0)=0x805, 0x9) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', './file0', [{0x20, '[-/+'}, {0x20, 'cgroup.controllers\x00'}], 0xa, "382f067355475ed044d5fb351b7051659a40535800bb7fffd0ecb50b5b05ba731d41a77101a504e640c687a948a708f61c548d1c8ab3f9266dd8708f83762587a9"}, 0x65) preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000340)=""/215, 0xd7}, {&(0x7f0000000440)=""/140, 0x8c}, {&(0x7f0000000500)=""/109, 0x6d}, {&(0x7f0000000580)=""/44, 0x2c}, {&(0x7f00000005c0)=""/105, 0x69}, {&(0x7f00000006c0)=""/109, 0x6d}, {&(0x7f0000000e80)=""/4096, 0x1000}], 0x7, 0x4, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002b00000008000300", @ANYRES32=r6, @ANYBLOB="9beb7d00000000000089008f"], 0x34}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r7, 0x1}, &(0x7f0000000280)=0x8) 22:55:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0xffffff7f00000000}, 0x0) 22:55:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x9260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:11 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0xf000) 22:55:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) 22:55:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r5 = socket(0x3, 0xa, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffff8}]}]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r6 = socket(0x11, 0x800000003, 0x8) bind(r6, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 731.524333] audit: type=1804 audit(1633647311.763:865): pid=23301 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1394/cgroup.controllers" dev="sda1" ino=14768 res=1 22:55:12 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x30000) [ 731.772521] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xa000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 731.993414] bridge1038: port 1(vlan556) entered blocking state 22:55:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) [ 732.041997] bridge1038: port 1(vlan556) entered disabled state [ 732.093325] device vlan556 entered promiscuous mode [ 732.215961] validate_nla: 6 callbacks suppressed [ 732.215970] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:55:12 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x34000) 22:55:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x60, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @NL80211_ATTR_SSID={0x24, 0x34, @random="4dcc78f086555ed0b85a35d9faca2f8cbfe64b00040000a66a1d94a40100680a"}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffe}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 22:55:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xa260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r5 = socket(0x3, 0xa, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffff8}]}]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r6 = socket(0x11, 0x800000003, 0x8) bind(r6, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 732.325555] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 732.366670] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 732.571914] bridge1038: port 2(vlan557) entered blocking state [ 732.602727] bridge1038: port 2(vlan557) entered disabled state [ 732.653762] device vlan557 entered promiscuous mode 22:55:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0xfffffffffffff000}, 0x0) 22:55:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r5 = socket(0x3, 0xa, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffff8}]}]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r6 = socket(0x11, 0x800000003, 0x8) bind(r6, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) 22:55:13 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) r1 = openat$cgroup(r0, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) r2 = socket(0x11, 0x800000003, 0x8) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) sendfile(r1, r2, &(0x7f0000000200)=0x6, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r6, &(0x7f0000000040)=""/46, 0x2e) getdents64(r6, &(0x7f0000000080)=""/66, 0x42) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7f}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040804}, 0x8001) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 22:55:13 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x400300) 22:55:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xb260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 732.963751] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 732.981375] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 733.011431] kauditd_printk_skb: 3 callbacks suppressed [ 733.011445] audit: type=1804 audit(1633647313.253:869): pid=23434 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1397/cgroup.controllers" dev="sda1" ino=14768 res=1 22:55:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) [ 733.138506] audit: type=1804 audit(1633647313.293:870): pid=23445 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1523/cgroup.controllers" dev="sda1" ino=14776 res=1 [ 733.313350] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xc000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r5 = socket(0x3, 0xa, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffff8}]}]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r6 = socket(0x11, 0x800000003, 0x8) bind(r6, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:13 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) getdents64(r1, &(0x7f0000000080)=""/66, 0x42) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000180)=0x1, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r3, &(0x7f0000000040)=""/46, 0x2e) getdents64(r3, &(0x7f0000000080)=""/66, 0x42) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000340)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x1000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x3c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x14}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) [ 733.518189] bridge1041: port 1(vlan558) entered blocking state [ 733.551360] bridge1041: port 1(vlan558) entered disabled state [ 733.616264] device vlan558 entered promiscuous mode [ 733.673961] audit: type=1804 audit(1633647313.913:871): pid=23471 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1524/cgroup.controllers" dev="sda1" ino=14018 res=1 22:55:14 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0xf0ffff) [ 733.739124] audit: type=1804 audit(1633647313.963:872): pid=23476 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1398/cgroup.controllers" dev="sda1" ino=14084 res=1 22:55:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 733.786501] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 733.810436] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 733.902380] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 734.072668] bridge1041: port 2(vlan559) entered blocking state [ 734.101524] bridge1041: port 2(vlan559) entered disabled state [ 734.163198] device vlan559 entered promiscuous mode [ 734.201036] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 22:55:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x2}, 0x0) 22:55:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xc260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:14 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x1000000) [ 734.245974] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 734.422022] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:55:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xd260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 734.472446] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) mmap(&(0x7f00003d9000/0x1000)=nil, 0x1000, 0x0, 0x30, r2, 0x3bc23000) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x18800, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xa4, r6, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x20}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}, {0x8}, {0x8, 0x0, 0x2}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x2}, @NL80211_ATTR_SCAN_SSIDS={0x38, 0x2d, 0x0, 0x1, [{0x10, 0x0, @random="9096021eef9bade9eebae7ca"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2010}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4880}, 0x4008000) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000900"/18, @ANYRES32=r4, @ANYBLOB="040046000500340056000000080026006c090000"], 0x30}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r7, &(0x7f0000001340)="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", 0x1000, 0x0, &(0x7f00000001c0)={0x2, 0x4e21, @private=0xa010102}, 0x10) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r7, 0x80286722, &(0x7f0000000380)={&(0x7f0000000340), 0x0, 0x40, 0x35}) sendfile(r2, r1, 0x0, 0x100000002) 22:55:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0xfffffffffffff000}, 0x0) 22:55:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r5 = socket(0x3, 0xa, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffff8}]}]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r6 = socket(0x11, 0x800000003, 0x8) bind(r6, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 734.643257] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:14 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x2000000) [ 734.764068] audit: type=1804 audit(1633647315.003:873): pid=23516 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1399/cgroup.controllers" dev="sda1" ino=14002 res=1 [ 734.793903] bridge1044: port 1(vlan560) entered blocking state [ 734.834295] bridge1044: port 1(vlan560) entered disabled state [ 734.898589] device vlan560 entered promiscuous mode [ 734.970803] audit: type=1804 audit(1633647315.063:874): pid=23524 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1525/cgroup.controllers" dev="sda1" ino=14067 res=1 [ 735.133227] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 22:55:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xe000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 735.272540] bridge35: port 1(vlan7) entered blocking state [ 735.292785] bridge35: port 1(vlan7) entered disabled state [ 735.314305] device vlan7 entered promiscuous mode 22:55:15 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x210, r4, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @NL80211_ATTR_KEYS={0x1f0, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "32bd44bc1d60a65613ed90046a"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a3b56d93f397eadb949f01e96e"}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x13, 0x4, "c3112fff7d1bce8f827273272d4b97"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "310549aac0d558c4870840ee6d"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0x14, 0x4, "fae83c7d42a9c9c21503c50b2bfc1a2b"}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "afc375d6cdc5755c4be52abb9b"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7014a18972"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "1a36a2d86d"}]}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2ebdb08e7728010341c2c2a4cb"}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x4}]}]}, 0x210}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) [ 735.340376] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}}, 0x40000) sendfile(r2, r1, 0x0, 0x100000002) [ 735.452524] bridge1044: port 2(vlan561) entered blocking state [ 735.482170] bridge1044: port 2(vlan561) entered disabled state [ 735.503635] device vlan561 entered promiscuous mode 22:55:15 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r5 = socket(0x3, 0xa, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffff8}]}]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r6 = socket(0x11, 0x800000003, 0x8) bind(r6, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x4}, 0x0) 22:55:15 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x3000000) 22:55:15 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) getdents64(r1, &(0x7f0000000080)=""/66, 0x42) splice(r0, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f0000000000)=0xffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x410103, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0xffffff80}, &(0x7f0000000280)=0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, r5, 0x800, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 22:55:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xe260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 735.712165] audit: type=1804 audit(1633647315.953:875): pid=23566 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir065698470/syzkaller.m8XkIq/1328/cgroup.controllers" dev="sda1" ino=14116 res=1 [ 735.912360] audit: type=1804 audit(1633647316.043:876): pid=23577 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1526/cgroup.controllers" dev="sda1" ino=14180 res=1 22:55:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xf000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 735.981710] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 736.123486] bridge1047: port 1(vlan562) entered blocking state [ 736.149728] bridge1047: port 1(vlan562) entered disabled state [ 736.170004] device vlan562 entered promiscuous mode 22:55:16 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0xf000000) 22:55:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r5 = socket(0x3, 0xa, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffff8}]}]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r6 = socket(0x11, 0x800000003, 0x8) bind(r6, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xf260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x6}, 0x0) 22:55:16 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x9effffff) 22:55:16 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {0x8}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) [ 736.493333] audit: type=1804 audit(1633647316.733:877): pid=23612 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1527/cgroup.controllers" dev="sda1" ino=13941 res=1 22:55:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x10000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 736.639857] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 736.732891] audit: type=1804 audit(1633647316.973:878): pid=23587 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1401/cgroup.controllers" dev="sda1" ino=14226 res=1 22:55:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x4}]}}}]}, 0x3c}}, 0x0) 22:55:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r5 = socket(0x3, 0xa, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffff8}]}]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r6 = socket(0x11, 0x800000003, 0x8) bind(r6, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 736.898304] bridge1049: port 1(vlan563) entered blocking state [ 736.934029] bridge1049: port 1(vlan563) entered disabled state 22:55:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r2, &(0x7f0000000040)=""/46, 0x2e) getdents64(r2, &(0x7f0000000080)=""/66, 0x42) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendfile(r3, r1, 0x0, 0x100000002) 22:55:17 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0xce0c0000) [ 736.969130] device vlan563 entered promiscuous mode 22:55:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x10260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:17 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0xf0ffffff) [ 737.207444] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 22:55:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x8}, 0x0) [ 737.351330] bridge37: port 1(vlan8) entered blocking state [ 737.383817] bridge37: port 1(vlan8) entered disabled state [ 737.411299] device vlan8 entered promiscuous mode 22:55:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r5 = socket(0x3, 0xa, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffff8}]}]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r6 = socket(0x11, 0x800000003, 0x8) bind(r6, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:17 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0xfcffffff) 22:55:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0xf8300, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x20000, 0x54) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x63, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}, 0x25}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x68, r3, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x21c, 0x58}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4080) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000100e6000000000800"/20, @ANYRES32=r9, @ANYBLOB="040046000500340056000000"], 0x28}}, 0x0) sendfile(r7, r6, 0x0, 0x100000002) 22:55:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x11260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 737.529833] validate_nla: 14 callbacks suppressed [ 737.529843] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 737.595659] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:17 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0xfffff000) [ 737.651940] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:55:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fffffff}]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 737.769657] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 738.044249] kauditd_printk_skb: 6 callbacks suppressed [ 738.044261] audit: type=1804 audit(1633647318.284:885): pid=23704 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir065698470/syzkaller.m8XkIq/1331/cgroup.controllers" dev="sda1" ino=14291 res=1 [ 738.045981] bridge1052: port 1(vlan564) entered blocking state [ 738.095632] bridge1052: port 1(vlan564) entered disabled state [ 738.116905] device vlan564 entered promiscuous mode [ 738.202819] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 738.268778] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:18 executing program 5: ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={0x3}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 22:55:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r5 = socket(0x3, 0xa, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffff8}]}]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) socket(0x11, 0x800000003, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x12260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 738.315667] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:18 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0xffffff7f) [ 738.470239] audit: type=1804 audit(1633647318.714:886): pid=23716 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1404/cgroup.controllers" dev="sda1" ino=13971 res=1 [ 738.485533] bridge1052: port 2(vlan565) entered blocking state [ 738.560826] bridge1052: port 2(vlan565) entered disabled state [ 738.617011] audit: type=1804 audit(1633647318.844:887): pid=23728 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1530/cgroup.controllers" dev="sda1" ino=14226 res=1 [ 738.626957] device vlan565 entered promiscuous mode 22:55:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100006000) 22:55:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0xa}, 0x0) 22:55:19 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0xffffff9e) 22:55:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x13260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r5 = socket(0x3, 0xa, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffff8}]}]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) socket(0x11, 0x800000003, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 738.994522] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 739.067993] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 739.091238] audit: type=1804 audit(1633647319.334:888): pid=23740 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir065698470/syzkaller.m8XkIq/1332/cgroup.controllers" dev="sda1" ino=14354 res=1 22:55:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x60100, 0x0) openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x10) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '|^\'[*:\x9f'}]}, 0x13) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0x3]}, 0x8, 0x800) sendfile(r6, r1, 0x0, 0x100000002) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r7, 0xc058671e, &(0x7f0000000740)={{'\x00', 0x3}, {}, 0x1, 0x0, 0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x200}) ioctl$FIONCLEX(r7, 0x5450) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) [ 739.278526] audit: type=1804 audit(1633647319.504:889): pid=23753 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1531/cgroup.controllers" dev="sda1" ino=14226 res=1 [ 739.328308] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 739.452258] audit: type=1804 audit(1633647319.614:890): pid=23760 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1405/cgroup.controllers" dev="sda1" ino=13971 res=1 22:55:19 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0xfffffff0) [ 739.574354] bridge1055: port 1(vlan566) entered blocking state [ 739.610866] bridge1055: port 1(vlan566) entered disabled state 22:55:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r5 = socket(0x3, 0xa, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffff8}]}]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) socket(0x11, 0x800000003, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 739.640223] device vlan566 entered promiscuous mode 22:55:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x14260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 739.701267] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 739.729492] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) getdents64(r1, &(0x7f0000000080)=""/66, 0x42) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r2, &(0x7f0000000040)=""/46, 0x2e) getdents64(r2, &(0x7f0000000080)=""/66, 0x42) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r6, &(0x7f0000000040)=""/46, 0x2e) getdents64(r6, &(0x7f0000000080)=""/66, 0x42) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1, r5, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @default_ap_ssid}, @chandef_params, @NL80211_ATTR_MAC={0x0, 0x6, @random="3e6898647a6c"}]}, 0x28}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 22:55:20 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0xfffffffc) [ 739.811876] audit: type=1804 audit(1633647320.054:891): pid=23776 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1532/cgroup.controllers" dev="sda1" ino=14163 res=1 [ 739.829469] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100006000) [ 740.146532] bridge1055: port 2(vlan567) entered blocking state [ 740.165520] bridge1055: port 2(vlan567) entered disabled state [ 740.222959] device vlan567 entered promiscuous mode 22:55:20 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x3000000000000) 22:55:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0xc}, 0x0) 22:55:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r5 = socket(0x3, 0xa, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffff8}]}]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 740.427689] audit: type=1804 audit(1633647320.674:892): pid=23796 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir065698470/syzkaller.m8XkIq/1333/cgroup.controllers" dev="sda1" ino=14354 res=1 22:55:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x15260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x4c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x880, 0x0, 0x2, 0x0, {0x800, 0x1, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x2}, 0x800, 0x4, 0x81}}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x54, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x20}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x84800) sendfile(r2, r1, 0x0, 0x100000002) [ 740.568265] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 740.612216] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 740.663406] audit: type=1804 audit(1633647320.904:893): pid=23817 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1533/cgroup.controllers" dev="sda1" ino=14403 res=1 [ 740.750951] audit: type=1804 audit(1633647320.954:894): pid=23815 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1407/cgroup.controllers" dev="sda1" ino=14417 res=1 22:55:21 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x40030000000000) [ 740.799803] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x16260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xf0ffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) 22:55:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) dup(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000001340)="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", 0x1000, 0x0, &(0x7f00000001c0)={0x2, 0x4e21, @private=0xa010102}, 0x10) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000007, 0x110, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) [ 741.036765] bridge1058: port 1(vlan568) entered blocking state [ 741.071553] bridge1058: port 1(vlan568) entered disabled state [ 741.172391] device vlan568 entered promiscuous mode 22:55:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r4 = socket(0x3, 0xa, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffff8}]}]}, 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x17260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 741.404116] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 741.541101] bridge1058: port 2(vlan569) entered blocking state [ 741.548512] bridge1058: port 2(vlan569) entered disabled state [ 741.566400] device vlan569 entered promiscuous mode [ 741.572058] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 22:55:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0xe}, 0x0) 22:55:21 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0xf0ffffffffffff) 22:55:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r4 = socket(0x3, 0xa, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffff8}]}]}, 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 741.701000] bridge39: port 1(vlan9) entered blocking state [ 741.751538] bridge39: port 1(vlan9) entered disabled state [ 741.792753] device vlan9 entered promiscuous mode 22:55:22 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x100000000000000) 22:55:23 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x10000000d) [ 742.850795] validate_nla: 4 callbacks suppressed [ 742.850805] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:55:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x18260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 742.899621] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 743.038606] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 743.080474] kauditd_printk_skb: 5 callbacks suppressed [ 743.080488] audit: type=1804 audit(1633647323.314:900): pid=23894 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir065698470/syzkaller.m8XkIq/1335/cgroup.controllers" dev="sda1" ino=14515 res=1 [ 743.102604] bridge1061: port 1(vlan570) entered blocking state [ 743.125189] bridge1061: port 1(vlan570) entered disabled state [ 743.142703] device vlan570 entered promiscuous mode [ 743.165104] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 743.174111] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000200)={{}, 0x0, 0x0, @unused, @name="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"}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0e9b50081b28559b334a", 0x12e9}], 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r6 = socket(0x11, 0x800000003, 0x8) bind(r6, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xc0, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xaa, 0x80, [@measure_req={0x26, 0xa4, {0x7a, 0x7f, 0x4, "e5c710d4f5b8e02d5295b6bc5e4ca5fa98b83c2bdc201e094145b22337426db6a89daa24dfdb2c4f315a4e44d4365578a52f2cf478f903f65fd896ad08f53575cb5fb0202ef48b45688633df2d490f4aca883a3d35dbf3c633ae057074e0d3c92bd41f9d13fc56e958d9b8b4a9f9b827290e9baf8e5d777d0120d016cc21666129a20d75716abc1a87e90dc6250e32d290d0d92faac7a390b9d258fb65acbdbe76"}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000081}, 0x10000000) 22:55:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r4 = socket(0x3, 0xa, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffff8}]}]}, 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x10}, 0x0) 22:55:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x19260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:23 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x200000000000000) [ 743.385679] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 743.418212] audit: type=1804 audit(1633647323.654:901): pid=23911 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1409/cgroup.controllers" dev="sda1" ino=13941 res=1 [ 743.433715] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x1a260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa7250400, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:24 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x300000000000000) [ 743.838710] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x60}, 0x0) [ 744.206621] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 744.206634] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) socket(0x3, 0xa, 0x1) sendfile(r2, r1, 0x0, 0x100000002) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 744.291790] audit: type=1804 audit(1633647324.524:902): pid=23942 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1536/cgroup.controllers" dev="sda1" ino=14466 res=1 22:55:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x1b260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) (fail_nth: 1) [ 744.419754] audit: type=1804 audit(1633647324.644:903): pid=23944 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1409/cgroup.controllers" dev="sda1" ino=13941 res=1 [ 744.543931] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 744.543947] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 744.676888] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 744.739749] FAULT_INJECTION: forcing a failure. [ 744.739749] name failslab, interval 1, probability 0, space 0, times 0 [ 744.739767] CPU: 0 PID: 23970 Comm: syz-executor.4 Not tainted 4.19.209-syzkaller #0 [ 744.739774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 744.739778] Call Trace: [ 744.739799] dump_stack+0x1fc/0x2ef [ 744.739820] should_fail.cold+0xa/0xf [ 744.739838] ? setup_fault_attr+0x200/0x200 [ 744.739852] ? lock_acquire+0x170/0x3c0 [ 744.739873] __should_failslab+0x115/0x180 [ 744.739889] should_failslab+0x5/0x10 [ 744.739903] kmem_cache_alloc_node+0x245/0x3b0 [ 744.739924] __alloc_skb+0x71/0x560 [ 744.739943] netlink_sendmsg+0x9ee/0xc40 [ 744.739960] ? aa_af_perm+0x230/0x230 [ 744.739972] ? nlmsg_notify+0x1f0/0x1f0 [ 744.739984] ? kernel_recvmsg+0x220/0x220 [ 744.740006] ? nlmsg_notify+0x1f0/0x1f0 [ 744.740021] sock_sendmsg+0xc3/0x120 [ 744.740034] ___sys_sendmsg+0x7bb/0x8e0 [ 744.740068] ? check_preemption_disabled+0x41/0x280 [ 744.740082] ? copy_msghdr_from_user+0x440/0x440 [ 744.740099] ? __fget+0x32f/0x510 [ 744.740118] ? lock_downgrade+0x720/0x720 [ 744.740134] ? check_preemption_disabled+0x41/0x280 [ 744.740150] ? check_preemption_disabled+0x41/0x280 [ 744.740168] ? __fget+0x356/0x510 [ 744.740184] ? do_dup2+0x450/0x450 [ 744.740197] ? lock_downgrade+0x720/0x720 [ 744.740212] ? vfs_write+0x3d7/0x540 [ 744.740233] ? __fdget+0x1d0/0x230 [ 744.740251] __x64_sys_sendmsg+0x132/0x220 [ 744.740264] ? __sys_sendmsg+0x1b0/0x1b0 [ 744.740276] ? vfs_write+0x393/0x540 [ 744.740300] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 744.740316] ? trace_hardirqs_off_caller+0x6e/0x210 [ 744.740329] ? do_syscall_64+0x21/0x620 [ 744.740345] do_syscall_64+0xf9/0x620 [ 744.740362] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 744.740373] RIP: 0033:0x7f7a6512c8d9 [ 744.740386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 744.740393] RSP: 002b:00007f7a626a3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 744.740407] RAX: ffffffffffffffda RBX: 00007f7a65230f60 RCX: 00007f7a6512c8d9 [ 744.740414] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 744.740422] RBP: 00007f7a626a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 744.740428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.740437] R13: 00007ffd3f9b63cf R14: 00007f7a626a3300 R15: 0000000000022000 [ 744.833570] bridge1066: port 1(vlan572) entered blocking state [ 744.833784] bridge1066: port 1(vlan572) entered disabled state [ 744.857698] device vlan572 entered promiscuous mode [ 744.920040] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 744.977650] audit: type=1804 audit(1633647325.204:904): pid=23977 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1537/cgroup.controllers" dev="sda1" ino=14577 res=1 [ 745.140096] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) 22:55:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) (fail_nth: 2) 22:55:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) sendfile(r2, r1, 0x0, 0x100000002) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:25 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0xf00000000000000) 22:55:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SNDCTL_SYNTH_INFO(r3, 0xc08c5102, &(0x7f0000000080)={"2e66375481a935d655b87e7bfdc92cce09330a86bb355c445afce71537a2", 0x80000001, 0x0, 0x0, 0x82, 0x7, 0x9, 0x0, 0x8d83c021e7b13b3d, [0x6, 0x7fffffff, 0x3, 0xa956, 0x0, 0x3ff, 0x8, 0xfffff2cf, 0xff, 0x2, 0x4, 0x200, 0x400, 0x2, 0x2, 0x1f, 0xfffffffd, 0x8, 0x3]}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 22:55:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x1c260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0xf0}, 0x0) [ 745.527321] FAULT_INJECTION: forcing a failure. [ 745.527321] name failslab, interval 1, probability 0, space 0, times 0 [ 745.579651] CPU: 0 PID: 23999 Comm: syz-executor.4 Not tainted 4.19.209-syzkaller #0 [ 745.587581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 745.596959] Call Trace: [ 745.599574] dump_stack+0x1fc/0x2ef [ 745.603234] should_fail.cold+0xa/0xf [ 745.607061] ? setup_fault_attr+0x200/0x200 [ 745.611408] ? lock_acquire+0x170/0x3c0 [ 745.615417] __should_failslab+0x115/0x180 [ 745.619686] should_failslab+0x5/0x10 [ 745.623533] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 745.628670] __kmalloc_node_track_caller+0x38/0x70 [ 745.633636] __alloc_skb+0xae/0x560 [ 745.637288] netlink_sendmsg+0x9ee/0xc40 [ 745.641374] ? aa_af_perm+0x230/0x230 [ 745.645195] ? nlmsg_notify+0x1f0/0x1f0 [ 745.649181] ? kernel_recvmsg+0x220/0x220 [ 745.653377] ? nlmsg_notify+0x1f0/0x1f0 [ 745.657456] sock_sendmsg+0xc3/0x120 [ 745.661191] ___sys_sendmsg+0x7bb/0x8e0 [ 745.665187] ? copy_msghdr_from_user+0x440/0x440 [ 745.669966] ? __fget+0x32f/0x510 [ 745.673447] ? lock_downgrade+0x720/0x720 [ 745.677615] ? check_preemption_disabled+0x41/0x280 [ 745.682699] ? check_preemption_disabled+0x41/0x280 [ 745.687830] ? __fget+0x356/0x510 [ 745.691304] ? do_dup2+0x450/0x450 [ 745.694859] ? lock_downgrade+0x720/0x720 [ 745.699029] ? vfs_write+0x3d7/0x540 [ 745.702763] ? __fdget+0x1d0/0x230 [ 745.706325] __x64_sys_sendmsg+0x132/0x220 [ 745.710579] ? __sys_sendmsg+0x1b0/0x1b0 [ 745.714652] ? vfs_write+0x393/0x540 [ 745.718408] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 745.723873] ? trace_hardirqs_off_caller+0x6e/0x210 [ 745.728908] ? do_syscall_64+0x21/0x620 [ 745.732909] do_syscall_64+0xf9/0x620 [ 745.736825] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 745.742026] RIP: 0033:0x7f7a6512c8d9 [ 745.745762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 745.764673] RSP: 002b:00007f7a626a3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 745.772399] RAX: ffffffffffffffda RBX: 00007f7a65230f60 RCX: 00007f7a6512c8d9 [ 745.779686] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 745.786975] RBP: 00007f7a626a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 745.794259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.801548] R13: 00007ffd3f9b63cf R14: 00007f7a626a3300 R15: 0000000000022000 [ 745.821621] audit: type=1804 audit(1633647325.894:905): pid=24003 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1538/cgroup.controllers" dev="sda1" ino=14641 res=1 [ 745.910720] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x1d260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 745.981797] audit: type=1804 audit(1633647326.144:906): pid=24000 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1410/cgroup.controllers" dev="sda1" ino=14625 res=1 22:55:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) sendfile(r2, r1, 0x0, 0x100000002) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) (fail_nth: 3) [ 746.098997] bridge1069: port 1(vlan573) entered blocking state [ 746.132413] bridge1069: port 1(vlan573) entered disabled state [ 746.201101] device vlan573 entered promiscuous mode [ 746.253575] audit: type=1804 audit(1633647326.484:907): pid=24024 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1539/cgroup.controllers" dev="sda1" ino=14546 res=1 22:55:26 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x9effffff00000000) [ 746.298972] FAULT_INJECTION: forcing a failure. [ 746.298972] name failslab, interval 1, probability 0, space 0, times 0 [ 746.341028] CPU: 0 PID: 24029 Comm: syz-executor.4 Not tainted 4.19.209-syzkaller #0 [ 746.348934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 746.352079] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 746.358376] Call Trace: [ 746.358400] dump_stack+0x1fc/0x2ef [ 746.358417] should_fail.cold+0xa/0xf [ 746.358433] ? setup_fault_attr+0x200/0x200 [ 746.358446] ? lock_downgrade+0x720/0x720 [ 746.358461] ? check_preemption_disabled+0x41/0x280 [ 746.358480] __should_failslab+0x115/0x180 [ 746.358501] should_failslab+0x5/0x10 [ 746.358514] kmem_cache_alloc+0x3f/0x370 [ 746.358530] skb_clone+0x151/0x3d0 [ 746.358546] netlink_deliver_tap+0x955/0xb00 [ 746.358566] netlink_unicast+0x545/0x690 [ 746.358583] ? netlink_sendskb+0x110/0x110 [ 746.358595] ? _copy_from_iter_full+0x229/0x7c0 [ 746.358609] ? __phys_addr_symbol+0x2c/0x70 [ 746.358624] ? __check_object_size+0x17b/0x3e0 [ 746.358640] netlink_sendmsg+0x6bb/0xc40 [ 746.358657] ? aa_af_perm+0x230/0x230 [ 746.358670] ? nlmsg_notify+0x1f0/0x1f0 [ 746.358680] ? kernel_recvmsg+0x220/0x220 [ 746.358700] ? nlmsg_notify+0x1f0/0x1f0 [ 746.358715] sock_sendmsg+0xc3/0x120 [ 746.358729] ___sys_sendmsg+0x7bb/0x8e0 [ 746.358745] ? check_preemption_disabled+0x41/0x280 [ 746.358757] ? copy_msghdr_from_user+0x440/0x440 [ 746.358772] ? __fget+0x32f/0x510 [ 746.358790] ? lock_downgrade+0x720/0x720 [ 746.358803] ? check_preemption_disabled+0x41/0x280 [ 746.358820] ? check_preemption_disabled+0x41/0x280 [ 746.358835] ? __fget+0x356/0x510 [ 746.358851] ? do_dup2+0x450/0x450 [ 746.358863] ? lock_downgrade+0x720/0x720 [ 746.358878] ? vfs_write+0x3d7/0x540 [ 746.358893] ? __fdget+0x1d0/0x230 [ 746.358911] __x64_sys_sendmsg+0x132/0x220 [ 746.358923] ? __sys_sendmsg+0x1b0/0x1b0 [ 746.358935] ? vfs_write+0x393/0x540 [ 746.358958] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 746.358974] ? trace_hardirqs_off_caller+0x6e/0x210 [ 746.358986] ? do_syscall_64+0x21/0x620 [ 746.359001] do_syscall_64+0xf9/0x620 [ 746.359018] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 746.359030] RIP: 0033:0x7f7a6512c8d9 [ 746.359044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 746.359051] RSP: 002b:00007f7a626a3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 746.359063] RAX: ffffffffffffffda RBX: 00007f7a65230f60 RCX: 00007f7a6512c8d9 [ 746.359071] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 746.359078] RBP: 00007f7a626a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 746.359085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.359094] R13: 00007ffd3f9b63cf R14: 00007f7a626a3300 R15: 0000000000022000 [ 746.640037] audit: type=1804 audit(1633647326.744:908): pid=24034 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1410/cgroup.controllers" dev="sda1" ino=14625 res=1 22:55:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x1e260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 746.788375] bridge1069: port 2(vlan574) entered blocking state [ 746.808825] bridge1069: port 2(vlan574) entered disabled state [ 746.870600] device vlan574 entered promiscuous mode 22:55:27 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0xce0c000000000000) 22:55:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) (fail_nth: 4) 22:55:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x1f000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) (fail_nth: 1) 22:55:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x600}, 0x0) 22:55:27 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0xf0ffffff00000000) 22:55:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(r2, r1, 0x0, 0x100000002) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 747.151199] FAULT_INJECTION: forcing a failure. [ 747.151199] name failslab, interval 1, probability 0, space 0, times 0 [ 747.221775] CPU: 1 PID: 24056 Comm: syz-executor.4 Not tainted 4.19.209-syzkaller #0 [ 747.229721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 747.239086] Call Trace: [ 747.241679] dump_stack+0x1fc/0x2ef [ 747.245308] should_fail.cold+0xa/0xf [ 747.249106] ? setup_fault_attr+0x200/0x200 [ 747.253424] ? lock_acquire+0x170/0x3c0 [ 747.257405] __should_failslab+0x115/0x180 [ 747.261641] should_failslab+0x5/0x10 [ 747.265445] kmem_cache_alloc_node+0x245/0x3b0 [ 747.270042] __alloc_skb+0x71/0x560 [ 747.273685] netlink_ack+0x27d/0xae0 [ 747.277395] ? memcpy+0x35/0x50 [ 747.280665] ? netlink_sendmsg+0xc40/0xc40 [ 747.284890] ? __copy_skb_header+0x414/0x500 [ 747.289293] ? kfree_skbmem+0x140/0x140 [ 747.293268] netlink_rcv_skb+0x353/0x440 [ 747.297324] ? rtnl_calcit.isra.0+0x430/0x430 [ 747.301814] ? netlink_ack+0xae0/0xae0 [ 747.305727] netlink_unicast+0x4d5/0x690 [ 747.309787] ? netlink_sendskb+0x110/0x110 [ 747.314038] ? _copy_from_iter_full+0x229/0x7c0 [ 747.318787] ? __phys_addr_symbol+0x2c/0x70 [ 747.323798] ? __check_object_size+0x17b/0x3e0 [ 747.328386] netlink_sendmsg+0x6bb/0xc40 [ 747.332447] ? aa_af_perm+0x230/0x230 [ 747.336244] ? nlmsg_notify+0x1f0/0x1f0 [ 747.340738] ? kernel_recvmsg+0x220/0x220 [ 747.344884] ? nlmsg_notify+0x1f0/0x1f0 [ 747.348860] sock_sendmsg+0xc3/0x120 [ 747.352574] ___sys_sendmsg+0x7bb/0x8e0 [ 747.356578] ? check_preemption_disabled+0x41/0x280 [ 747.361688] ? copy_msghdr_from_user+0x440/0x440 [ 747.366443] ? __fget+0x32f/0x510 [ 747.369895] ? lock_downgrade+0x720/0x720 [ 747.374033] ? check_preemption_disabled+0x41/0x280 [ 747.379043] ? check_preemption_disabled+0x41/0x280 [ 747.384063] ? __fget+0x356/0x510 [ 747.387515] ? do_dup2+0x450/0x450 [ 747.391045] ? lock_downgrade+0x720/0x720 [ 747.395185] ? vfs_write+0x3d7/0x540 [ 747.398914] ? __fdget+0x1d0/0x230 [ 747.402451] __x64_sys_sendmsg+0x132/0x220 [ 747.406686] ? __sys_sendmsg+0x1b0/0x1b0 [ 747.410736] ? vfs_write+0x393/0x540 [ 747.414456] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 747.419812] ? trace_hardirqs_off_caller+0x6e/0x210 [ 747.424820] ? do_syscall_64+0x21/0x620 [ 747.428787] do_syscall_64+0xf9/0x620 [ 747.432583] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 747.437762] RIP: 0033:0x7f7a6512c8d9 [ 747.441467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 747.460453] RSP: 002b:00007f7a626a3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 22:55:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x1f260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 747.468237] RAX: ffffffffffffffda RBX: 00007f7a65230f60 RCX: 00007f7a6512c8d9 [ 747.475584] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 747.482848] RBP: 00007f7a626a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 747.490110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 747.497371] R13: 00007ffd3f9b63cf R14: 00007f7a626a3300 R15: 0000000000022000 [ 747.557670] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 747.631561] audit: type=1804 audit(1633647327.864:909): pid=24069 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1411/cgroup.controllers" dev="sda1" ino=14339 res=1 [ 747.633564] FAULT_INJECTION: forcing a failure. [ 747.633564] name failslab, interval 1, probability 0, space 0, times 0 22:55:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x20000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 747.777650] CPU: 0 PID: 24069 Comm: syz-executor.5 Not tainted 4.19.209-syzkaller #0 [ 747.785596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 747.794966] Call Trace: [ 747.797572] dump_stack+0x1fc/0x2ef [ 747.801232] should_fail.cold+0xa/0xf [ 747.805048] ? setup_fault_attr+0x200/0x200 [ 747.809390] ? lock_acquire+0x170/0x3c0 [ 747.813401] __should_failslab+0x115/0x180 [ 747.817682] should_failslab+0x5/0x10 [ 747.821504] kmem_cache_alloc_trace+0x284/0x380 [ 747.826191] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 747.831091] alloc_pipe_info+0xb8/0x470 [ 747.835094] splice_direct_to_actor+0x6dd/0x8d0 [ 747.839779] ? apparmor_getprocattr+0x11e0/0x11e0 [ 747.844652] ? generic_pipe_buf_nosteal+0x10/0x10 [ 747.849513] ? do_splice_to+0x160/0x160 [ 747.853502] ? security_file_permission+0x1c0/0x220 [ 747.858544] do_splice_direct+0x1a7/0x270 [ 747.862710] ? splice_direct_to_actor+0x8d0/0x8d0 [ 747.867574] ? security_file_permission+0x1c0/0x220 [ 747.872642] do_sendfile+0x550/0xc30 [ 747.876381] ? do_compat_pwritev64+0x1b0/0x1b0 [ 747.881068] ? vfs_write+0x393/0x540 [ 747.884809] __se_sys_sendfile64+0x147/0x160 [ 747.889233] ? __se_sys_sendfile+0x180/0x180 [ 747.893663] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 747.899217] ? trace_hardirqs_off_caller+0x6e/0x210 [ 747.904248] ? do_syscall_64+0x21/0x620 [ 747.908241] do_syscall_64+0xf9/0x620 [ 747.912058] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 747.917275] RIP: 0033:0x7f8a32acc8d9 [ 747.920993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 747.940085] RSP: 002b:00007f8a30043188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 747.947815] RAX: ffffffffffffffda RBX: 00007f8a32bd0f60 RCX: 00007f8a32acc8d9 [ 747.955101] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 747.962379] RBP: 00007f8a300431d0 R08: 0000000000000000 R09: 0000000000000000 [ 747.969658] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000001 [ 747.976941] R13: 00007fff8bffc6af R14: 00007f8a30043300 R15: 0000000000022000 [ 748.008917] validate_nla: 8 callbacks suppressed [ 748.008927] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:55:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 748.056380] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 748.095425] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 748.167821] bridge1072: port 1(vlan576) entered blocking state [ 748.181156] bridge1072: port 1(vlan576) entered disabled state [ 748.192048] device vlan576 entered promiscuous mode 22:55:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0xa00}, 0x0) 22:55:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x20260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 748.420490] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 748.450665] kauditd_printk_skb: 1 callbacks suppressed 22:55:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 748.450679] audit: type=1804 audit(1633647328.684:911): pid=24106 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1541/cgroup.controllers" dev="sda1" ino=13961 res=1 [ 748.458537] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.510594] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 748.676566] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:29 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0xfcffffff00000000) 22:55:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x21260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 748.751809] audit: type=1804 audit(1633647328.984:912): pid=24131 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1412/cgroup.controllers" dev="sda1" ino=14530 res=1 [ 748.871559] audit: type=1804 audit(1633647329.094:913): pid=24132 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1542/cgroup.controllers" dev="sda1" ino=14615 res=1 [ 748.895625] bridge1075: port 1(vlan577) entered blocking state 22:55:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 748.922789] bridge1075: port 1(vlan577) entered disabled state [ 748.988506] device vlan577 entered promiscuous mode [ 749.060919] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:55:29 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0xffffff7f00000000) [ 749.108219] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x22260400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 749.196063] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 749.416950] bridge1075: port 2(vlan578) entered blocking state [ 749.443713] bridge1075: port 2(vlan578) entered disabled state [ 749.492745] device vlan578 entered promiscuous mode [ 749.570263] audit: type=1804 audit(1633647329.804:914): pid=24166 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1543/cgroup.controllers" dev="sda1" ino=14307 res=1 22:55:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0xc00}, 0x0) 22:55:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000003) 22:55:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:29 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0xfffffffffffff000) 22:55:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x3f000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 749.817924] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:55:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 749.863883] audit: type=1804 audit(1633647330.094:915): pid=24180 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1413/cgroup.controllers" dev="sda1" ino=14791 res=1 22:55:30 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) getdents64(r1, &(0x7f0000000080)=""/66, 0x42) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x0, 0x3ff, 0x10, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x7, 0x4, 0x10001}}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x6, &(0x7f0000000140)=@raw=[@generic={0x2, 0x3, 0x9, 0x8, 0x7}, @exit, @call={0x85, 0x0, 0x0, 0x65}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @alu={0x7, 0x1, 0x3, 0x2, 0x5, 0xffffffffffffffc0, 0xfffffffffffffffc}], &(0x7f0000000180)='GPL\x00', 0x1, 0xe6, &(0x7f00000003c0)=""/230, 0x41100, 0x19, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xe, 0xd7, 0x4be0}, 0x10, 0xffffffffffffffff, r0}, 0x78) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r2, 0x34c28a6d953bdcd5}, 0x14}}, 0x0) [ 749.911435] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 750.046258] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 750.160203] audit: type=1804 audit(1633647330.394:916): pid=24202 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1544/cgroup.controllers" dev="sda1" ino=14784 res=1 22:55:30 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095", @ANYRES32=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB="0800000091cbdc000000000000000015f9ffff04001e000000000014000000000000000100000042cca17904f7bc2545d427935309f0eb321dd79529742e3cfa73b088ea8561275b959fdc221bbe49ef72bbfc1e9f96b362bfdc1c44f8ae9c94a87e6027f62b00a93858dfa4e9a64eab1604675a4f75bc76"], 0x28}}, 0x4040) 22:55:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x40000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x7, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 750.249734] bridge1078: port 1(vlan579) entered blocking state [ 750.289353] bridge1078: port 1(vlan579) entered disabled state [ 750.359896] device vlan579 entered promiscuous mode [ 750.426667] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 750.459394] audit: type=1804 audit(1633647330.694:917): pid=24218 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1545/cgroup.controllers" dev="sda1" ino=14339 res=1 22:55:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0xe00}, 0x0) 22:55:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000004) 22:55:30 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x800, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000001340)="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", 0x1000, 0x0, &(0x7f00000001c0)={0x2, 0x4e21, @private=0xa010102}, 0x10) sendmsg$kcm(r2, &(0x7f0000000400)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @empty}, 0x0, 0x2, 0x2, 0x1}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)="809f5b92bd1bfded08721cbc89445b590f7cc934cd7932faec1c05315b808a342619fa1b", 0x24}, {&(0x7f00000002c0)="4e44fc", 0x3}, {&(0x7f0000000300)}], 0x3, &(0x7f0000000580)=[{0x18, 0x101, 0x3, "1d4e98"}, {0x50, 0x1, 0x9, "c078f081ee8c2f43f3a992ede9676d61111155e261b9368b6a3b4c325978d35c73d04ec46a3ac873345f942a2e255aa63436d811e83cbd56a6e86ae1fdfdde"}, {0xd8, 0x102, 0x401, "f47b2056dff5210dfa7da1e7a57732c864351964ca0e77653b8da43d5a323ee5ab464333bed5fc7d5d9eda7b9951ce40450515d6f977079912e150af43f25389a8a4819ab68c8806201871250139167b2c541c65e2852d63f24df1620f67a4b162018b4969016ff4256f663814fa4500f60cf03701f12f4b21b564a710aa5f9aceb2adba14bd72c9868709490097b3a281f4f937bbf600fdbbbf03c780f89b66cb94bcc6d51294e38c6820549d5b0f4bcbb93a820d7747c229fe8f2440798d7a94a2c984"}, {0x100, 0x118, 0x20, "7f2b320ba11cff2dd4b30680ae195b73274a1a3892e86de3f18c3f9fedd968e85c006b55919461536cd0b8636e9cf49ccc05f149ef7b774e9a731f31e8352a3a4114db95eba7d520bfacb97a9f9a0a9a0dc6ca21ed5c252d07f0b19969746fce8e08577c3309d85874775509923a4d366e14a044031cae0dc5a96bebd4c6dec039bae864313efac6e9844567e03131bd979d6717cc0bb877af614f9f3997f4f14fdaaef73d0159a12386bc63b57481d3ffc4a6585a500176b21a943fab6f2002eb044527cc22a06752c80e7d05dedbc86113732997fb98bae7264b4e52937643131b4891a6c50964ed37a15fccb55985"}, {0xe8, 0x1, 0x1000, "48c019e80d52bec772bcc43ff302e9d89d112c85244da464068d38045e303390b4d532558f110a1d87d6e583a6f21d071326802c6fe7cff92e89977fa104fbcea0c31322265c013009686cf83c26a2622592c81723a9823da6fcfdb88278e345e5dbe73df4859a2695beabea9742b824cec80999fcb463fdb069e2e940b134acaf7aa52f346bf21dd6c5199c4fceb5df97288bd33c5910c75a524bf5438a6cebdf12f995f3b00231254470f404539faad2777da037920e6ccd397fb73ffd0155b584b4c7d9149ba0cf62e9145802cad831fff9c8"}, {0x20, 0x109, 0x0, "b61c59081d7d7855aec45e8a07d988"}, {0xa8, 0x108, 0x7, "16b92fd45370b55a12b64f926fc9e354f11731534e7e557fa85be79aba0cd285e4864ac6fc4bea6f50b3ae791e85605a068af4c462f7b489503cfdea4bd8e0301bb971ecc746bb6323714ce5aa69dd71764cc17e31283b482d3da7c4efe1b5812c9ee59dba6aa413e182474255b52359a529d16c88f9915e404f0e880ebe2c0e02a19d76d7e2a5fd36b1659a670af49212bc4f"}, {0xf8, 0x10e, 0x7f, "984d13b30f6f009e14c162cce718eefc6f30730aa1fd050c86e9ad065cbdd2ef8e4b7178e4b6ed081f42460ba88f0f4276a592f42e9507939002ba23db79599ebc7e6fafbdc3ed9f9e0fc032838ed1d03aae1b1245c52bce40e7d9f0a584954461673c0eec5779c1f2aae895b4f396a2b3ecb7ddb591b72629dbe5b51439c723335668c94ce88e2ac59faa46ebe0e2d8f5254cd912d57951c84a1915c1ed481d5bf3c0721a0fb14a48ff934f1932dd7fa63980a7a98d261371bca8f0ddc80d2ba981143697c30670fb61154bf983b75372456b91e7879207b54067a794e7babbb092"}, {0xa8, 0x117, 0xff, "2c4502f486488f94dff5cc7e63214d6961387e29915e53b4c7b4665cc63dcf3655be4a054550dab2d12530dcd98676695595f86de8f5838442eae86d26a18cf6e368ad393508ba9cdabbd128dc43c00b8dbfab598ed3a56342b70e3632ee8ece962f63d51bbf7d73a285c729e3fd8c94562c2386a45f9db2b10ae13a7dcda1a7b5ba88d25b41618c014c396f4a2028c36063"}, {0xf0, 0x111, 0x9, "a2bfcaafd996851d6bc0cc17c0c029bf6851b38add962d1ee6cb9d00e52f6d225236933943f7e2ba7dc74ca36a67418ed9d8ee7ee47095606854fa19438025270c3b5fa6ab621dc1b36885161985195649b00606553c38f990328e3272015769eee1c51a4815c13a876eeaf954a2fea48f802af8735d61bc65720fd64f42193ecb48cbb746d2afcaeb10907bef10e2a3038b2db0ebd7ebe9eae30a4456e507b3241cdc2b8cae3a223f547e7c16a02b387caeb04a22f26a4ed7abdf9d42d8f2838e76abca001fd168a847ccb9068a5b26a8671443b02f7c77892a2e7d12b7"}], 0x680}, 0x40000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r4, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 22:55:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x48000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 750.599019] bridge1078: port 2(vlan580) entered blocking state [ 750.606041] bridge1078: port 2(vlan580) entered disabled state [ 750.620502] device vlan580 entered promiscuous mode [ 750.626177] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 750.633599] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x4c000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xa, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 750.867560] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 750.889746] audit: type=1804 audit(1633647331.124:918): pid=24247 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir169902747/syzkaller.FtHOwX/1546/cgroup.controllers" dev="sda1" ino=14795 res=1 22:55:31 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000005) [ 751.010214] bridge1081: port 1(vlan581) entered blocking state [ 751.032778] bridge1081: port 1(vlan581) entered disabled state [ 751.061092] device vlan581 entered promiscuous mode 22:55:31 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000a3bf37f40900000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 22:55:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 751.178186] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 751.197672] audit: type=1804 audit(1633647331.434:919): pid=24275 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1415/cgroup.controllers" dev="sda1" ino=14794 res=1 [ 751.350988] bridge1081: port 2(vlan582) entered blocking state [ 751.361201] bridge1081: port 2(vlan582) entered disabled state [ 751.401768] device vlan582 entered promiscuous mode 22:55:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x57010000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x5865}, 0x0) 22:55:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xe, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:31 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r4, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="03000000b936ad165a1685a358ea2994e43556787ddd551367d36aa9d7ee9a19e5f4d1997b04d2ce1b6dba6a567493232b699c79e60a954a471e227781006e538aebbdd1d8057581f39cf71937deaf19253b0e5230fa4bb1dee72a6f37", @ANYRES16=r8, @ANYBLOB="0106000000000000005f30000000050033000300000008000200", @ANYRES32=r9, @ANYBLOB="05003600000000000500350000000000050034"], 0x3c}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0xc800}, 0x8882) 22:55:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x60000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 751.688980] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 751.882405] audit: type=1804 audit(1633647332.104:920): pid=24266 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1415/cgroup.controllers" dev="sda1" ino=14794 res=1 [ 751.943548] bridge1084: port 1(vlan583) entered blocking state [ 751.970144] bridge1084: port 1(vlan583) entered disabled state [ 752.053758] device vlan583 entered promiscuous mode 22:55:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000006) [ 752.222032] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x65580000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000008) [ 752.397959] bridge1084: port 2(vlan584) entered blocking state 22:55:32 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000002) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 752.449772] bridge1084: port 2(vlan584) entered disabled state [ 752.498215] device vlan584 entered promiscuous mode 22:55:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x60, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x6000}, 0x0) 22:55:32 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="38000000000005000000000000010000c50000000e00000895"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r2 = socket$inet(0x2, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r3, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x271) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x271) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 22:55:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x68000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xf0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:33 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='sched_process_wait\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='host1x_syncpt_wait_check\x00', r0}, 0x10) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000814}, 0x20000000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r3, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) [ 752.869225] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x6c000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x10000000d) 22:55:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000002) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 753.040965] bridge1087: port 1(vlan585) entered blocking state [ 753.047875] bridge1087: port 1(vlan585) entered disabled state [ 753.069110] device vlan585 entered promiscuous mode [ 753.133197] validate_nla: 10 callbacks suppressed [ 753.133646] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:55:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x74000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:33 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r2, &(0x7f0000000040)=""/46, 0x2e) getdents64(r2, &(0x7f0000000080)=""/66, 0x42) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='fscache_gang_lookup\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r3, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) [ 753.177070] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 753.206386] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 753.327607] bridge1087: port 2(vlan586) entered blocking state [ 753.346339] bridge1087: port 2(vlan586) entered disabled state [ 753.369353] device vlan586 entered promiscuous mode 22:55:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x6558}, 0x0) 22:55:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000002) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:33 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000006000000000000c0199bc6d5010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x7, 0x0, 0x2, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x700, 0x408000, 0x6}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x2, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x3}], &(0x7f0000000180)='GPL\x00', 0x22, 0x1000, &(0x7f0000000580)=""/4096, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x7, 0x4}, 0x10}, 0x78) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r3, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 22:55:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x7a000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x10000000f) 22:55:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000002) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 753.712708] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 753.741234] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000002) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xa00, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 753.856035] kauditd_printk_skb: 2 callbacks suppressed [ 753.856048] audit: type=1804 audit(1633647334.094:923): pid=24432 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1419/cgroup.controllers" dev="sda1" ino=14805 res=1 [ 753.900418] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x81000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000002) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 754.030184] bridge1090: port 1(vlan587) entered blocking state [ 754.063209] bridge1090: port 1(vlan587) entered disabled state [ 754.084999] device vlan587 entered promiscuous mode 22:55:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xc00, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 754.133211] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 754.181907] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x8100}, 0x0) 22:55:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x88600000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xe00, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:34 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) accept4$packet(0xffffffffffffffff, &(0x7f0000002fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003000)=0x14, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x22) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0xde, 0x24, 0xf1d, 0x0, 0x100000, {0x0, 0x0, 0x0, r7, {0xfffc}, {0x0, 0xffff}}, [@TCA_STAB={0xbc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3f, 0x2, 0x10000, 0x2, 0x401, 0x1000, 0x5}}, {0xe, 0x2, [0x0, 0x2, 0x8, 0x20, 0x7f]}}, {{0x1c, 0x1, {0x2, 0x80, 0x20, 0x7, 0x1, 0x70a1cc4, 0x8, 0x8}}, {0x14, 0x2, [0x1ff, 0xe8d, 0x6, 0x7, 0x5, 0x9786, 0x7, 0x7]}}, {{0x1c, 0x1, {0xff, 0xbf, 0x100, 0x9, 0x0, 0x2, 0x3, 0xa}}, {0x18, 0x2, [0x401, 0x1, 0x9, 0x1, 0x0, 0xf1a, 0x8, 0x8001, 0x3, 0x5]}}, {{0x1c, 0x1, {0x8, 0x4, 0x106e, 0x51, 0x1, 0x3ff, 0x4, 0x4}}, {0xc, 0x2, [0x7, 0x5, 0x7, 0x32a]}}]}]}, 0xe0}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000900)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x20, 0x4, 0x0, 0x3, 0x0, 0x3ff, 0x20, 0xd, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1f9afa5c, 0x2, @perf_bp={&(0x7f00000003c0), 0xa}, 0x1100, 0x2, 0x5cbe, 0x6, 0x8, 0x7ff, 0x0, 0x0, 0x3, 0x0, 0x9a}, r8, 0xb, r1, 0xe) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000003180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003140)={&(0x7f0000003040)={0xe8, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000008}, 0x20000000) openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x40000, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0xc4, r10, 0x34c28a6d953bdcd5, 0x0, 0xfffffffc, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xa8, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}]}]}, 0xc4}}, 0x80) [ 754.381654] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 754.410920] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 754.513394] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 754.619018] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000010) 22:55:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xedc, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 754.768456] netlink: 186 bytes leftover after parsing attributes in process `syz-executor.3'. 22:55:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 754.843593] bridge1092: port 1(vlan588) entered blocking state [ 754.896398] bridge1092: port 1(vlan588) entered disabled state [ 754.945344] audit: type=1804 audit(1633647335.184:924): pid=24505 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1420/cgroup.controllers" dev="sda1" ino=14163 res=1 [ 754.947333] device vlan588 entered promiscuous mode [ 755.021402] netlink: 186 bytes leftover after parsing attributes in process `syz-executor.3'. [ 755.052079] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:55:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 755.076329] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:35 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="d5dc00000000000000001500000005001e00000000000c0006000100000001000000"], 0x28}}, 0x0) 22:55:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x88a8ffff, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0xf000}, 0x0) 22:55:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x5865, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:35 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r3, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, r3, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x48104) 22:55:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x890a0000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x10000002b) 22:55:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 755.577060] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 755.684993] audit: type=1804 audit(1633647335.914:925): pid=24547 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1421/cgroup.controllers" dev="sda1" ino=14800 res=1 [ 755.821623] bridge1094: port 1(vlan589) entered blocking state [ 755.860064] bridge1094: port 1(vlan589) entered disabled state [ 755.934964] device vlan589 entered promiscuous mode [ 756.012872] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x6558, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x9d7792e5, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 756.219674] bridge1094: port 2(vlan590) entered blocking state 22:55:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000064) [ 756.268481] bridge1094: port 2(vlan590) entered disabled state [ 756.329323] device vlan590 entered promiscuous mode 22:55:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0xf0ffff}, 0x0) 22:55:36 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$revoke(0x15, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x840000, 0x0, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="91eaacccdba844df641ceff47028") exit_group(0x0) syz_emit_ethernet(0x6e, &(0x7f0000000680)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x29, 0x0, @mcast1, @dev, [@srh]}}}}}}}, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0x6) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./file0\x00', &(0x7f0000000480)='proc\x00', 0x8410, &(0x7f00000004c0)='\xff\xff\xff\xff\xff\xff') mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) lsetxattr$security_ima(&(0x7f00000001c0)='./bus\x00', &(0x7f00000002c0), &(0x7f0000000500)=@v2={0x3, 0x2, 0x10, 0x7, 0xf1, "5024b96debbcc139adc564ac8c7499c125d902ceab3a2c8f9bc88882c339d4b6c47289c602a011e67b6ec60909d95a31c524d0019183a3e84b27a0ba590491aa9456d63e3a65497281e7002e9909839bf4e60ab5065924e36a3b51b433340c4f0317cfd1f671fcce76dcd037adc1f7aac75dc928071c795f51d6c52635df02ff83416bf8af92e01b0086ad3d242288ad3cc8063dac56584473ed26655722f81f7e53d166ca7412f6708ede3fb1b3b04b1b312da36baeb78f0aee9d3af74e1489df70533c75d66f1cb4ad0527fcb4e8f707710c877706fcb127855d83f1bdefdbe4e7e762f9ccc9f5a6be3cd49b54f90c7e"}, 0xfa, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r3, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x20000004) 22:55:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x8100, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 756.460381] audit: type=1804 audit(1633647336.694:926): pid=24584 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1422/cgroup.controllers" dev="sda1" ino=14807 res=1 22:55:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x9effffff, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xdc0e, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 756.877027] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 756.883307] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 756.915256] overlayfs: maximum fs stacking depth exceeded 22:55:37 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xa0250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 757.200935] bridge1097: port 1(vlan591) entered blocking state [ 757.259320] bridge1097: port 1(vlan591) entered disabled state 22:55:37 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r3 = dup3(r2, r1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x71, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x56) dup(r1) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000003280)={r4}, &(0x7f00000032c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000180)={r4, 0x2b, "c0cf3d0f3443ff5bc2b11348a8b42b4193763e43c31ebbddc82336119ff3827cbfb456e95a86ca8910d84d"}, &(0x7f00000001c0)=0x33) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r7, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 22:55:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000075) [ 757.360298] device vlan591 entered promiscuous mode 22:55:37 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xf000, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 757.661517] audit: type=1804 audit(1633647337.894:927): pid=24630 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1423/cgroup.controllers" dev="sda1" ino=14807 res=1 22:55:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x1000000}, 0x0) 22:55:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xa1250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x1000000f0) 22:55:38 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 758.261204] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, 0x0, 0x24000000) 22:55:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xa2250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000300) [ 758.636052] bridge1099: port 1(vlan592) entered blocking state [ 758.718694] bridge1099: port 1(vlan592) entered disabled state 22:55:39 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 22:55:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, 0x0, 0x24000000) [ 758.827343] device vlan592 entered promiscuous mode [ 758.847780] audit: type=1804 audit(1633647339.084:928): pid=24675 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1425/cgroup.controllers" dev="sda1" ino=13961 res=1 [ 759.007941] validate_nla: 10 callbacks suppressed [ 759.007952] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:55:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x400300, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 759.101047] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xa3250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x2000000}, 0x0) 22:55:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, 0x0, 0x24000000) 22:55:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xf0ffff, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:39 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0106000000000000005f30000000050033000300000008000200", @ANYRES32=r9, @ANYBLOB="05003600000000000500350000000000050034"], 0x3c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000002}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r8, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x1a0, r10, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x3c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x23c}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_KEY={0x58, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "946a580a37ad550ec2a75c48b9a55ea5"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0xb8, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "00260373ba661a4e0c69560f48296a1e3eab2160e5d0af1b5a54b6bf51eeb82e"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7f}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "87957e220f353053a1606867d52fac7a"}, @NL802154_KEY_ATTR_ID={0x6c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xff}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfb30}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x7}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x81}, 0x80) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 22:55:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x1000003ae) [ 759.761301] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 759.789467] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x1000000, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xa4250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 760.012556] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 760.069015] audit: type=1804 audit(1633647340.305:929): pid=24718 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1426/cgroup.controllers" dev="sda1" ino=14800 res=1 22:55:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000500) [ 760.288812] bridge1101: port 1(vlan593) entered blocking state [ 760.381515] bridge1101: port 1(vlan593) entered disabled state [ 760.468184] device vlan593 entered promiscuous mode [ 760.738201] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 760.759072] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x2000000, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 760.827471] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xa5250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 761.066374] bridge1101: port 2(vlan594) entered blocking state [ 761.092348] bridge1101: port 2(vlan594) entered disabled state [ 761.162997] device vlan594 entered promiscuous mode 22:55:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x4000000}, 0x0) 22:55:41 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x6c, 0xca, 0xb, @local, @remote, 0x8000, 0x7888, 0x7, 0x5}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000023c0)={0x1e28, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x168, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xac}, @ETHTOOL_A_BITSET_VALUE={0xaf, 0x4, "ef9e1c7c3658db2f5ceb726eec45505a55b3118f244efa53fa823216f3be6cc24d253ccae32ad562bad412becb018f20fd8ac2edcc770dc761dc8d550c3447556d3fc17bd81456a6380b3865a948a80e4bab88f20deb4641a45a5b8243b0091ef5ddce75729dc006eb6dcb874c820374bf71ba25b36f3de41e6a5cf4685afac759822a50212768c673c7111746f5a0f9830c3ef1fda307b9456f5293c9581e72b5e69caf1f17a09380ac89"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xa8, 0x4, "654814419166ecf76d98c2f02e568898047d92af5dc9bddff234a78fa01a3a0b5271c84afb8adec6cd41f55814ee32fe654ab6ea6cc2b32f6c0557d5e918c44a49d713a16809ebe68940c2d320037f26d393ae5fc941d7c6045df601c256b93c675413a823fee34b3b7c7606d82c39127ff74a6159fb9f133701d3a6f4b6a1891469d0e4af00f5b7d641537e8442b64ce26d5cbe3905d4febf5abbc4781d64b76b0a61e8"}]}, @ETHTOOL_A_FEATURES_WANTED={0x10f4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xb3, 0x5, "fec7629c4b14a43e1192b7b06ff145ff2851a351435e843ad176a92b8ebdc70928377fa619da7f1bab052451ddccd16b89abb4fafdac3db586468851c5d11a54a6e0483fc8d3b04732e83aa26d1fe16805f1eeec162d408341c30b66513e65f914eb3d0cdbab846f9458a0735623088ddfdad66a1feeb9a4d77cca544ea9bbbcb41fc5a7eecea5b7c59eb4423df1843ffc617c30a3ee3f4ff32241d6426a20a290a4bf9fdd2686739888a18d5e3a4a"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_VALUE={0x2e, 0x4, "255dcabc5a33520132516a498b24b5735553e8adc76eb9bddb61f7200063ef143051bce579d08f577f32"}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0xe0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xcf, 0x4, "885e3fc1d68c2557ce6c2c3753548baf56534eb7b7be3059bd0fcb02b267e0b9fa16504a532dbdb8c2f968ba6189c49b253097cb088f0d8a22de0c585f80a1dea261a748ea9eabcd39b519d001486a033cdc35ac82883cea56fa68ad23a09f093a1a4fc8550cc5d64c8e782a180c202c1eb524cf66a8eb110e259287bebc8ebf78c7bcaebb248bfc082dff6b0d96ddac710f1708e795c894a8d47e67e72a2bfda562a6092e1a02f42dc332e324241f322299295e89b4fcad0e7746f4561a95fcb8591ade234b549f2c9f7a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4923cfb5}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x408, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x15, 0x5, "cc8f822d3826c7f56e77eeeff51af1297a"}, @ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5876de80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '[-&:/[.D\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'lock_acquire\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xf5, 0x4, "6fbb7d869b80d806cbf9a455d02af1976aaaa045c3a30a591bcaa9cc5bfb9973a8a0d63092c3ae3d024c9dc15798b1f1a2430b970e1d6936f4b6e1247cd80c2caa39a92c7d516b8e86534afd99c2bb33f9c8a2a00273493183e2336c4b8e555b65375157bb047a49a7e8104a9eb1bdafd096633ea3215c9d2f802a4fa0883ff7e465791e6df3e3692190d87b9056307b83c14335b94584d25d2fd14cfe7caf753356d29d1fb9fa5d0fe357bfef9b831c4513fc674f57d75927f20a7d77112382b91b4816630847f80ec5bdcf0590c59985fa099c17906e3d7e039fd4afb0abba07fda9441022242da0781a9e7c340e4802"}, @ETHTOOL_A_BITSET_BITS={0x164, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\x81}&.-,\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*)[.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'lock_acquire\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf5}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9b04}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}, @ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9a4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb85}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '[//,{^\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '(\x10*\xb7{,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x521}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x660, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1a8, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'lock_acquire\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x86d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xba1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa83}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa9}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'lock_acquire\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff801}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '(-&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'lock_acquire\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ':^\\A\\[,.\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x19, 0x4, "ae5db7714564cfae03ddd55a61b95a55f669c9c5f8"}, @ETHTOOL_A_BITSET_BITS={0x154, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x691}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8a8}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'lock_acquire\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'lock_acquire\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'lock_acquire\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'lock_acquire\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd83}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '&A-\x98\\\xdf:^\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x50}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x180, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1af3e759}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$\\{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-.\x8e$\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4835}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '.$%$\\,%$)^^,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'lock_acquire\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xe4, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'lock_acquire\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x55d}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#)-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}]}, @ETHTOOL_A_BITSET_VALUE={0xc9, 0x4, "aab37abf9eaa8a90724df1ae7575edf63dc2ef95b5e83586f01e1c4f49371b28aae075de4ef499ae1d03d9a3686ef8117b9ca8c34166dbc62d454b55f6516722451e87ffbcf6a2542d0d5eeea064afdd217d34e1f8b6cbfd66f30869cfb53e15f2cc25e114af01c8d0724007f9e9998c62be06c584cf6e127ad7ace9f93f361945844d06df67e961addf2c10544d9e1773653762f529710a1ef861e43c0b18cd7042910a1f85867a38c750068eaf49b84228b1c8d7c4d162c32be81875ef4a259626be9ad6"}]}]}, 0x1e28}, 0x1, 0x0, 0x0, 0x4048010}, 0x20000080) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 22:55:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000600) 22:55:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x3000000, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xa6250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 761.660381] audit: type=1804 audit(1633647341.895:930): pid=24767 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1428/cgroup.controllers" dev="sda1" ino=14827 res=1 22:55:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x4000000, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 761.774773] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 761.807332] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:42 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='cq_poll\x00', r0}, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 22:55:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xa7250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 762.099146] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 762.316709] bridge1104: port 1(vlan595) entered blocking state [ 762.361135] bridge1104: port 1(vlan595) entered disabled state 22:55:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:42 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18010000c50000000e00000095000000000000000000000000a944f7fe11ff28075f3c5d3fad396fdd3488f108a7b913c95f0000000000000000a24e1544c6294b952b"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) [ 762.466933] device vlan595 entered promiscuous mode [ 762.592818] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 762.623273] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x6000000}, 0x0) 22:55:43 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000700) 22:55:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x6000000, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xa8250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:43 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x22) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x2, &(0x7f0000000140)=@raw=[@alu={0x7, 0x0, 0x1, 0x0, 0xa, 0x40}, @alu={0x4, 0x1, 0x4, 0x1, 0x7, 0xfffffffffffffff8, 0xffffffffffffffff}], &(0x7f0000000180)='GPL\x00', 0x8, 0xca, &(0x7f00000003c0)=""/202, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x8, 0x10000, 0x3}, 0x10}, 0x78) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r7, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r8, &(0x7f0000001340)="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", 0x1000, 0x0, &(0x7f00000001c0)={0x2, 0x4e21, @private=0xa010102}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r8, 0xc0709411, &(0x7f0000000580)={{0x0, 0x9, 0x1, 0x4, 0x6, 0x3, 0x7, 0x5, 0x7, 0x3, 0x4, 0x9e, 0x1, 0x1, 0x7}, 0x20, [0x0, 0x0, 0x0, 0x0]}) [ 763.260780] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:55:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 763.292292] audit: type=1804 audit(1633647343.525:931): pid=24824 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1429/cgroup.controllers" dev="sda1" ino=14840 res=1 22:55:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xa9250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x7000000, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 763.707171] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 763.961401] audit: type=1804 audit(1633647344.195:932): pid=24830 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1429/cgroup.controllers" dev="sda1" ino=14840 res=1 [ 764.047213] bridge1107: port 1(vlan596) entered blocking state [ 764.090879] bridge1107: port 1(vlan596) entered disabled state 22:55:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000900) [ 764.209312] device vlan596 entered promiscuous mode 22:55:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 764.412626] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 764.452408] audit: type=1804 audit(1633647344.685:933): pid=24867 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1430/cgroup.controllers" dev="sda1" ino=13988 res=1 [ 764.462898] validate_nla: 2 callbacks suppressed [ 764.462907] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 764.527780] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 764.555832] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 764.757114] bridge1107: port 2(vlan597) entered blocking state [ 764.810222] bridge1107: port 2(vlan597) entered disabled state [ 764.896040] device vlan597 entered promiscuous mode 22:55:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x8000000}, 0x0) 22:55:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xaa250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x8000000, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:45 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000140)={0x2, 0x80000001, 0xa3, 0x5, 0xe, 0x3e}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 22:55:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000a00) [ 765.388741] audit: type=1804 audit(1633647345.625:934): pid=24894 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1431/cgroup.controllers" dev="sda1" ino=14227 res=1 [ 765.427754] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 765.436877] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xab250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:45 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) getdents64(r1, &(0x7f0000000080)=""/66, 0x42) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000005c0), 0x422200, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x3, &(0x7f0000000140)=@raw=[@generic={0x2, 0x8, 0x7, 0x0, 0x7fffffff}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x74, &(0x7f0000000280)=""/116, 0x21980, 0x4, '\x00', r2, 0x12, r3, 0x8, &(0x7f0000000600)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x5, 0x0, 0xfff}, 0x10, r4, r0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x505a01, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r7, &(0x7f0000000040)=""/46, 0x2e) getdents64(r7, &(0x7f0000000080)=""/66, 0x42) ioctl$sock_SIOCADDDLCI(r7, 0x8980, &(0x7f00000001c0)={'wlan1\x00', 0x7}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r6, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) r8 = creat(&(0x7f00000003c0)='./file0\x00', 0xa0) sendmsg$nl_route_sched(r8, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@getchain={0x44, 0x66, 0x21c, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x10, 0xfff3}, {0xd, 0x8}, {0x5, 0x9}}, [{0x8, 0xb, 0x2fac}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x7fffffff}, {0x8}]}, 0x44}}, 0x8800) [ 765.678679] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 766.002351] bridge1110: port 1(vlan598) entered blocking state [ 766.047577] bridge1110: port 1(vlan598) entered disabled state [ 766.070287] device vlan598 entered promiscuous mode [ 766.089497] audit: type=1804 audit(1633647346.325:935): pid=24896 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1431/cgroup.controllers" dev="sda1" ino=14227 res=1 [ 766.227136] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:55:46 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000b00) [ 766.271256] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 766.369079] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 766.502282] audit: type=1804 audit(1633647346.735:936): pid=24931 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1432/cgroup.controllers" dev="sda1" ino=14098 res=1 [ 766.531052] bridge1110: port 2(vlan599) entered blocking state [ 766.532518] bridge1110: port 2(vlan599) entered disabled state [ 766.571140] device vlan599 entered promiscuous mode 22:55:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0xa000000}, 0x0) 22:55:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xc000000, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xac250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:46 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0d268a927f1b6588b93e480b41ba3860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd60da03059bcecc7a9544fa3a07e758044ab4ea6f7ae56d88fecf9141a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0d268a927f1b6588b93e480b41ba3860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd60da03059bcecc7a9544fa3a07e758044ab4ea6f7ae56d88fecf9141a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000001340)="3c000e483fdef698dd2e8ae0921c8f72ed3fb92ff8651c051115b608e580b89689beb6ffedef1a70eadec15194b78db935c77472909ddfdba7a277a4e39a2d09abd720df237be600840b225a50c7080f09c2b194bd84d83368ca8f7167e74bfd086fb247c087894b872c6afddf13307a540d291345897a488b1a3cd6892efc5579c0f38e22d32cc91670643a6d5a1a02992d52b47736c4d04b690cd65050226539781ecf09ebd52b864dc5d51db6e19c645de2d55f2de11eb9ed5b466f9e3380c8173c5410b0021e1347c5abad38dcf7af6fe88f177e5d433277d9b60ab01ecde0c680074072dce4f88d74fbc0bacc2c3c3b083982653c4f70057db3dd3b36ac9a999d06e36ec1eb7cb8adf53ab0df5109e8f15b7349e9b3509e28a34d7e5b3268ea3bcb09d4d8883b48ba9e237768af0aa184bffda76bd2adc33baaff1f70dd49f853da1750bc9bb2f6e86caf573dec2fc09d003795e59aaec9738eae1f0d26dfe27a9915ea226cf84c4043063d252cebe211e549a85f70384c899c817701be58eb718b2ac5463eb1aacd075edef1d4ac420163ad55258a494b80b6413e77816ebbdcd31f5210fe7d32f7ed2cd51ec31e2e05a65d857ff8f68299e4f2bb4d0bfe66d13a1596c839a4db9baf9248a4aac69e7825253e891b7928176e91633e86a653b9023d6d26551a6ec95f3ee11347b9545d518a813be86a6aa49eb057d41d8288799da42a72f64ee83b4564a824c5b0cfea205745a371e15f67105d42eef5123d350c92368b3fd2d71eae25a2c8c78852ae65f7cede6fc9696454b914cffa80e594d443c1c8db2830d61ad8ad36a99869f906cc93dbe79a0f704151452f79ec3d08dddf2d2ec3c939a906ab3e92fb65991172fe32ef3381af5526c3bfd4aeeaa2e1fed46419494ff99e1d530f303685cd5e022909a1eee1294fb1a28be79dabcd2124df9356a9966ba5d17e494d80431f509a57f78578c80da45fd578d32632d176c52de6d00724608079f72235a119277917c490de5453e0b225dd8e9d1e6bb92d9bf95107a08bde6385c8ac66d7b4f8083039013e71bf274519af61474cc0d824673d60acc236303fc25491f3397b655dd9ca86482be4aa2fabe39828eddced23fbd15a64b6b8a70a154839399e64facc4c8bef7abdb7ab8d295f436fa98e0859efd7d3b3d7fd3e65250e86400c36891e173a7f1139e1a6e4b3560f5ad0433670dd758d7e579f4705aaf130963861de997b26c8e17e62f1ddf7850670fae5a1651b46d7bb2b7b3b4d789d2c6ede4f6f61dfa63f36c70c8ba49d3cc4ec7a2ed9a87553e6a553e4c995fe09df78175d49ce59bac42e057209fa54f08c6f2d63bdb8658479647ec50950aa9dfaa4be0843b6c06d8d570853adfd01f0f8e18e8d8ab3a4dc0bce90fe21e81003cf634a606c1ddaf11edc50eb0b94a4c33f2dd49390cc278249ffbca3b71472efcd24667bc57e81ecbc58a245d014327da29df19f4da0736f93c0ec06805ac1f48742ee8c5513483a5b75deded0159c7986bfdff11efc0abab145942c810acb0a728b29fdeb5ae47012bc1d42a1dd167ce3a4c394af27c341ac7660221deb495c7ad50b9f2e57c82318fe60b6075762ecdf26a97696ea2bb2b108b35580a002994dcef94d94065ce925468495df90078c6d26efc3e344a5a16e1b5ef7e2a57d4b726e85e428e074082ecd3f63540ae643385864556626ad87e887f73f1c10a5938287d4c77430b79774ade52d1a2f146a71a88f61ea428b2486d6a602f1cb5110212e665cec8ddcae7ef9afb94ed38a9cea6d0e188291fc6e47c772bc91dd13ed11c071f4e32a231f08c2c8c94817e9eac2f45737f28bac68bcc37c03c5490b54b344b619196464034ee713cdb8a5385091a6ada8b9f00c9a42fb01bc4155dd48df5e74d8fa4e350bf92304bc719ab92d52bf4b01215397441dd5f24d816431a7701c1f29f289f14a89d85a0b51c9cee18568b2f8c329282287cfb707c11d9f9b267d8aa443e3751b2c6fbf5ee2a9ff4509f75c02a683dd309dfd44c3fb059f8dcd7a5c78e2fb7e24b3a7fd05dc96fb8ca543b2bb5406550287866c8768fffb16da70b943efe24c766867e9e91c1495ac037d6d752c8f778e52a028217b93cd40d850f8fec3c9e8ca5a4de332a68e0815fc9c5d400461e1c354d2de794e4cdc6a1402cb57e7dc4bc19c4d3a7cb6e6cd9f5d3f232fac48af9d838687d11af2b4e48e81fc9beeb2f839bfc5172a00c63a043642d141cdbe416fd1dee635b6c9a808b3dc071ac594e12a7692e70d51e6191d76b4f104a421d07f0bb5c7bbd0e48a8752b83b1180a33f549dbf1ac262b4e1d34462bb6cc965f9850a76deda6513bd562373f5070c0c63839866ad881c5d96265b066fa9a04d9d2760c19b4069aeb472d032f4485c8bf4f0edbb3fe6a011818231900f0c9fa63c2a9b13c91af025f37661b1e3e0121d296d01e73d74dfcaecdb3c84e7502d1a95fe7e1cbc6a891faee27bfcca027c89799cd4d73508b182203a66c714dc42686b57e6b945c6d723da7b8481808620786a109093353383359015c27958327d94633449948d578c5c7950263206986063e0234a69b4a2012e5d268c1de3e7de79d77f0f66c708f552d75b339d9ebdcea96cbf698198350940659375c2f489abc20229f2e94f79ea64d42bdde8a8d42fc841d941d37e0fd3bace4d7baaef2e9c2c0bfc181ac3df0c6e089517fb7cd5d12d68476d1e4497809d634efcd11caff719a6a67f9a22efddfaa67684cfde69f7d658964a657d0ddb23dc07311b33169bf4cf11c5e009c14ad1b9f29e51ba019591f0c503f51e1be3be0678df13aaa60a3b3fb13cb8eefe917f661259c7282a34a336c26d3e7b9f148964b7dad7fe71855aba1699199a310e5010edb5c340f7d7c18d1effe3be215cd3b080be363dd58d757af196fd1b9e327f4c6b867cbc4715ca0bcc9b337daa6b22097dce94a83327d7f233c3738a2f35ce6e3577851ca6b1c64432cdf3986e97fd68d3f791dda21faf6cc09147fae682e5ab7a964119dc65f7839e772c66065fb803316a0117551dde65c55fc8a59802889e5dce7845dde19566cbc12f44c4a646723ed7e93c4993129d3a265353fa6129a5172b03ece143d8441d3966a774d6f7171c2a75d4838bc856634b11204ef165aa2ebf6d2cb3badb496cd1dfa36b752ca5fe545abe83668e16fa3ce1d0842ea1152aecd41ab6b36ebed817ea410b5c27a5c118c971c978d1ca9683087ee44ec9fb34e9ce205bfc7a4ba7d2d8ff3a428fd3427ec4d0df9d13ec2832c9feaf47504a1231a21650f2b6e37bd8d471fb681e5b89ef6dcdea61aac88ae8589d06c91a058479989624bca173c70bf97c3bb25609d5fd8b615f0e1c1e2aec13b970927178ec557818fd1a89bffd54c67a7e1b12fb6ef3ee739770c92ccc330484f363d9092a64709977b9fd02b02e146ba6c65fae2b7bb1602357b814763189373a167da2a6dc75a70bf300d106bbbe895d3bc7bc1bd9208d98a34602360788df92d8aa22f404d34a044bcda19737ca20f409c0b326d8af9bc9e0c5d8628794bfafd97dc1bdf9d0308fb1cfd683188179502292ef12fc088412cf5a143e723ada1f05029e2a91f73368a0d06815fb01165a072ad02d501de5bc50cc8b1088db99490cfb82719438c566718dd9ef1d51e4e26e4dc82925db49218b32682034c7d2027acf31b5511798018d986c35c864f8b2902dd1df5c780a1c7e77b70de0a52a8a8cc343be983e8338219b3b1d0eab35164342f13722924ea573957b56fa7064adfe687e81eaaf3589627c95c800b0afef156c56d7be0ca4c14fab31c524b843a074359526b0975811ea9beae269caf7cf387e509a37b918c6bb60c0634db5a40b43e641535df3fcf38f27e479636e8e3f4bdcdc8df61c2867e3b1920160dc63227ca81d829f1e8d7c5e46909991cb5965f64cbc99a6351ac3a14e09fcd76c7bda79c7aa1b15e8eac7eb13784da41aaeb1161c1ec9a0667bbe31f634b4261c4f08c0b2598f9a7dd19f9899395df02b460e75b2fad6cc52bc2cf5888816d1eed513838377b4fe4091fc8f4a0a7f0b76d22e2a2091497ec2e010d3582ef03e4749467b8b62bbae7cd30696ca1f8ae6dfe06d1a5f05c282691e204c0dc46de60c5a7c668e5422d939e2405b5711532a6b6bcdcb59f16deeb89a97332a067e209eb7780a1af0d07055306162c3723cbfa1f4f6f67d0a93b211f7662e08c6d6f5223a8940b06ba61250b732507a5d152ac834c01e3e543541d18b6dbcbcf4177ee761f218540740fe9094e265e562c015cb8229812ad39834ff42e43572bcc222c9066fe298f2980e4e400dc37354c4ba61cab7a236e3843ba3808e0ded4a7fd584ad875b3911239cea6bc68cd38e6c7f471059c873d8313f3646b16570fbc0f1b0db208c376ff3a7fce26dfbcb0ca1974a3ef7a6739573bc82526156a3887dbae695d731c84b2241b12a80e13c6d2af154a150714bb8b3d8933924d222dba7658029ed699cd199fb48cf8fae25fce2becbefc8c92eb77afe225b6d73c378461bfd6ee69cfd0f428587ba272fa060cee2195047a6dbf94c487a71afd81ad053e2e92c81b93a3ba3d1354a18026926d5812a387ecc32e88e3860f52ac8cbd157858f7532289cbf3fe5775aeee95284f4c82dd7775e6f2bc64ca252e38d96ab8679596cf75f175184308c102c802055268c1a983eee33332a522614fb6d84d6a27a5f6c0d9ee38a4078379610b5f266adee64c4f86437c70840c5524e781ed4ee49e2698c01e5f5774fccb3a4f8f50a8d8c4a15d16c49d01629c1bf83bb04c7e40e1325b8bf508eab5ba64a3e75cef12d986997acf45091eb89bc705c7716f09446415d6203cadb5330a933d1bd0b7fcbd2ac8f9e9f63739decb774c418373bced094df724c41e2b6bb8f1eeab87e4383bced2c98062d468d0466978d805e909f152b5fccd20996a8c91b80087af7a4b732c25746e0bffdbe0cef569626c6d70de2dca69e0c2155c2c81ba15182da1ffcc3f05c418c1a0aaef87f0e8e19efd1a5927fa6e1924e3f9b1b7d03b5a600d26a286e5063746aaa039628f23f3547f64a48c6a4d9ef5ad9457a09596476ca99006baf208a4bf319cb1104a553ccaa0ae4945056dc4c6c78c598d4a7b734dadfeabacb0cebb7d57e297791b1e817b5b82d5792baf86a5fe2df646ace83f710c98245d8cbc7efa3d5c94fdc35572bbf4ec6b245f1f2e505732ed6f483fc2f05826fdb579a25d5dcfb1a89765b9841b9cc717cadcc1cd60f561a9ace256f8f24d8d3190f8b85e5e2b59f380ef1758e40fbfe6952c55d615150883f2fe678c9ed8881f4b77cd1178bbc6f3b023f532b559f0a375bb0c0e3b158f906dc7f04bc23a896d9d1a470cdc49c53e423881415fa203af931d6f93e9b5c8f36b2a73e2e79beb4bee3c74dbc8c9b87158d2ddcd07753b45454ef099eb00d7c39e040f5a95c1c78748145710bd7e812a66f34223048221e90e0e149270b33fe426cf28ea6519ed2126bc7b54b7832c468ebb8354ddf61594427c36b020959afb587be31086cdb4447f0d0a92b9d89350679663c07ceb244e1b1e569ab79e44d01e6ecea4a916c3c2b763e552aad0db3f32843fb1b04f4cb5245e49b0bcb544be73c1b548e4b4758bc917f3966a6257fdc5951e0745708e7e63ec74bd6748d1146834c66437f6e936700febaadf33dda44af8b5d8eba82cfc35119809bf3dfed196fd3fd5faa2071b6c7fa4f23574f44b17aa0", 0x1000, 0x0, &(0x7f00000001c0)={0x2, 0x4e21, @private=0xa010102}, 0x10) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x111301) r3 = accept$netrom(r2, &(0x7f00000003c0)={{0x3, @rose}, [@default, @default, @remote, @remote, @bcast, @rose, @bcast, @null]}, &(0x7f0000000080)=0x48) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000300)='veth1_to_bridge\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYRESHEX=r1], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x67b0983c4401ca78}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r6, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x40}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) [ 766.911984] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 766.970418] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xad250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xe000000, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:47 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000b35) [ 767.235943] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 767.407211] audit: type=1804 audit(1633647347.645:937): pid=24969 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1433/cgroup.controllers" dev="sda1" ino=14423 res=1 [ 767.539117] bridge1113: port 1(vlan600) entered blocking state [ 767.571274] bridge1113: port 1(vlan600) entered disabled state 22:55:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 767.617228] device vlan600 entered promiscuous mode [ 767.708597] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 767.765606] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 767.859333] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xf000000, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:48 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) [ 768.090186] bridge1113: port 2(vlan601) entered blocking state [ 768.148533] bridge1113: port 2(vlan601) entered disabled state [ 768.219680] device vlan601 entered promiscuous mode 22:55:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0xc000000}, 0x0) 22:55:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xae250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:48 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000c00) 22:55:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x10000000, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:48 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000500060000200099cde79d2b1fdcd60ca1a15b0000010000c50000000e000000952fac9284e7e3c4c6f408f6cb37280285ba5da4e02c57fd6d387f61b9187d0630feb489904cbb044d8e28bf079f18082a3f3a3cfaf6f75740184226498bb0089e00a537637cc1133320f2a49641d4c257fcdd1f2c17fcca4e466e43c311fe000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) stat(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d6f64653d303030303030306e307030303030303030303030303030312c6d6f64653d30303030303030303030303030303030303130303030312c6d6f64653d3030303030303030303030301e303030303030303031312c6d6f64653d30303030303030303030303030303030303130306f64653d30303030303030303030303030303031302c6d6f64653d3030303030303030303030303030303030302c303030332c6d6f64060000000000000030303030303030303030303030303031312c657569643e", @ANYRESDEC=r1, @ANYBLOB=',\x00']) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast1, @in=@broadcast, 0x4e23, 0x5, 0x4e23, 0x1, 0xa, 0x0, 0x20, 0x14, 0x0, r1}, {0x200, 0x2, 0x7, 0x4, 0x9, 0x6, 0x0, 0x9}, {0x9, 0x31, 0x751, 0x6}, 0x0, 0x6e6bc0, 0x2, 0x1, 0x2}, {{@in6=@private2, 0x4d6, 0x33}, 0x2, @in=@local, 0x3500, 0x0, 0x0, 0x5, 0xfffffff9, 0x1c}}, 0xe8) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r4, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0x5, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x0, 0x4, 0x0, 0x1, [{0x0, 0x3, 0x6}, {0x0, 0x3, 0x2}, {0x0, 0x3, 0x7}, {0x0, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24014}, 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000480)=0x0) perf_event_open(&(0x7f0000000680)={0x8, 0x80, 0xf1, 0xd, 0x9, 0xa0, 0x0, 0x100000001, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb64, 0x2, @perf_bp={&(0x7f00000002c0), 0xa}, 0x8002, 0x8, 0xf36, 0x3, 0x30, 0x8, 0x80, 0x0, 0x7, 0x0, 0x3}, r5, 0x5, 0xffffffffffffffff, 0x3) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="d5dc00000000000000001500000005001e00000000000c0006000100000001002b0000"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x50) [ 768.702862] audit: type=1804 audit(1633647348.935:938): pid=25008 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1434/cgroup.controllers" dev="sda1" ino=14370 res=1 22:55:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 768.788895] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x60000000, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xaf250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 769.021093] bridge1116: port 1(vlan602) entered blocking state [ 769.088281] bridge1116: port 1(vlan602) entered disabled state [ 769.182296] device vlan602 entered promiscuous mode 22:55:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000d00) [ 769.410867] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x65580000, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 769.602591] audit: type=1804 audit(1633647349.835:939): pid=25039 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1435/cgroup.controllers" dev="sda1" ino=13962 res=1 [ 769.671285] bridge1116: port 2(vlan603) entered blocking state [ 769.748701] bridge1116: port 2(vlan603) entered disabled state [ 769.822109] device vlan603 entered promiscuous mode 22:55:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0xe000000}, 0x0) 22:55:50 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x60) ioctl$FICLONE(r3, 0x40049409, r1) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="d5dc00000000000000001500000005001e00000000000c0006000100000001000100"], 0x28}}, 0x0) 22:55:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xb0250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x81000000, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:50 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000e00) [ 770.252976] validate_nla: 4 callbacks suppressed [ 770.252987] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 770.313950] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 770.398314] audit: type=1804 audit(1633647350.635:940): pid=25071 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1436/cgroup.controllers" dev="sda1" ino=14563 res=1 22:55:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xb1250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 770.596031] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x88a8ffff, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 770.886827] bridge1119: port 1(vlan604) entered blocking state 22:55:51 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000f00) [ 770.931865] bridge1119: port 1(vlan604) entered disabled state [ 770.969349] device vlan604 entered promiscuous mode 22:55:51 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) getdents64(r1, &(0x7f0000000080)=""/66, 0x42) openat$cgroup_ro(r1, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800fff7cc", @ANYRES16=r3, @ANYBLOB="d5dc00000000000000001500000005001e00000000000c0006000100000001000000"], 0x28}}, 0x0) 22:55:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 771.206574] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 771.244361] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x10000000}, 0x0) 22:55:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x9effffff, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xb2250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:51 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100001100) 22:55:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 22:55:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000100)="db1365672e440f01cbf3a5440f01cb2e6764660f38819907000000f30fc73266baf80cb8d0ef4a8bef66bafc0cec0f3067440f871fffffff66baf80cb8c8284782ef66bafc0ced"}], 0x0, 0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x27c6) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040)=0xfe, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r5, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x60c4) 22:55:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 771.901655] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:55:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xdc0e0000, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 772.088746] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xb3250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 772.290306] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100001800) 22:55:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 772.607585] bridge1122: port 1(vlan605) entered blocking state [ 772.641014] bridge1122: port 1(vlan605) entered disabled state [ 772.753770] device vlan605 entered promiscuous mode 22:55:53 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100002000) [ 772.942865] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 772.980668] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 773.040274] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 773.199007] bridge1122: port 2(vlan606) entered blocking state [ 773.247711] audit: type=1804 audit(1633647353.485:941): pid=25177 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1440/cgroup.controllers" dev="sda1" ino=14098 res=1 [ 773.266480] bridge1122: port 2(vlan606) entered disabled state [ 773.348946] device vlan606 entered promiscuous mode 22:55:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x1031afbd}, 0x0) 22:55:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xf0ffffff, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:53 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="28008000", @ANYRES16=r2, @ANYBLOB="d5dc00000000000000001500000005001e00000000000c0006000100000001000000"], 0x28}}, 0x0) 22:55:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xb4250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) [ 773.825578] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 773.862164] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffa888, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xb5250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 773.934838] audit: type=1804 audit(1633647354.165:942): pid=25172 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1440/cgroup.controllers" dev="sda1" ino=14098 res=1 22:55:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x24000000) 22:55:54 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0xfffffffffffffffc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 22:55:54 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100002800) [ 774.154937] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 774.462218] bridge1125: port 1(vlan607) entered blocking state [ 774.556257] bridge1125: port 1(vlan607) entered disabled state [ 774.641203] device vlan607 entered promiscuous mode [ 774.841246] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 774.851855] audit: type=1804 audit(1633647355.085:943): pid=25212 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1441/cgroup.controllers" dev="sda1" ino=14754 res=1 [ 774.889886] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 22:55:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xfffff000, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 775.100626] bridge1125: port 2(vlan608) entered blocking state [ 775.129319] bridge1125: port 2(vlan608) entered disabled state [ 775.202542] device vlan608 entered promiscuous mode 22:55:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x60000000}, 0x0) 22:55:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xb6250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100003000) 22:55:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffff7f, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x88a8ffff, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:55 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r5, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200c0090}, 0x40050) [ 775.672445] validate_nla: 2 callbacks suppressed [ 775.679933] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:55:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffff9e, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 775.751457] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x20000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:56 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100003800) [ 776.038532] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:55:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xb7250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 776.307272] bridge1128: port 1(vlan609) entered blocking state [ 776.338424] audit: type=1804 audit(1633647356.575:944): pid=25292 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1443/cgroup.controllers" dev="sda1" ino=14627 res=1 [ 776.371099] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 776.390446] bridge1128: port 1(vlan609) entered disabled state [ 776.418203] device vlan609 entered promiscuous mode [ 776.500493] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 776.519706] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xfffffff0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x600}, 0x0) 22:55:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x65580000}, 0x0) 22:55:57 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x2c, r4, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r6, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r6, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000000}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040900}, 0x8011) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r8, &(0x7f0000000040)=""/46, 0x2e) getdents64(r8, &(0x7f0000000080)=""/66, 0x42) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x48, r4, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x480c1}, 0x24000080) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 22:55:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xb8250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:55:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 776.929208] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:55:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffff, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 777.030253] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 777.206269] audit: type=1804 audit(1633647357.445:945): pid=25329 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1444/cgroup.controllers" dev="sda1" ino=14847 res=1 [ 777.367775] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 777.382438] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 777.579267] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 777.775826] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 777.891794] bridge1130: port 1(vlan610) entered blocking state [ 777.942365] bridge1130: port 1(vlan610) entered disabled state [ 777.979154] audit: type=1804 audit(1633647358.215:946): pid=25329 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1444/cgroup.controllers" dev="sda1" ino=14847 res=1 [ 778.027689] device vlan610 entered promiscuous mode [ 778.185865] bridge7: port 1(vlan3) entered blocking state [ 778.211051] bridge7: port 1(vlan3) entered disabled state [ 778.298174] device vlan3 entered promiscuous mode 22:55:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xb9250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 778.348127] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 778.357139] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:55:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x600}, 0x0) 22:55:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0xf, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:55:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x81000000}, 0x0) 22:55:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100004100) 22:55:58 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r4, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r3) [ 778.835020] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:55:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xba250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 779.088980] audit: type=1804 audit(1633647359.325:947): pid=25383 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1445/cgroup.controllers" dev="sda1" ino=14037 res=1 22:55:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x10, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 779.239613] bridge9: port 1(vlan4) entered blocking state [ 779.317406] bridge9: port 1(vlan4) entered disabled state [ 779.405818] device vlan4 entered promiscuous mode 22:55:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0xc0, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 779.494914] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 779.780200] bridge1132: port 1(vlan611) entered blocking state 22:56:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100004800) [ 779.835446] bridge1132: port 1(vlan611) entered disabled state 22:56:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) (fail_nth: 1) 22:56:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0xec0, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 779.929535] device vlan611 entered promiscuous mode [ 780.080284] audit: type=1804 audit(1633647360.315:948): pid=25420 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1446/cgroup.controllers" dev="sda1" ino=14098 res=1 22:56:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xbb250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 780.150718] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 780.205903] FAULT_INJECTION: forcing a failure. [ 780.205903] name failslab, interval 1, probability 0, space 0, times 0 [ 780.286964] CPU: 1 PID: 25428 Comm: syz-executor.1 Not tainted 4.19.209-syzkaller #0 [ 780.294895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 780.304279] Call Trace: [ 780.306900] dump_stack+0x1fc/0x2ef [ 780.310564] should_fail.cold+0xa/0xf [ 780.314398] ? setup_fault_attr+0x200/0x200 [ 780.318751] ? lock_acquire+0x170/0x3c0 [ 780.322774] __should_failslab+0x115/0x180 [ 780.327037] should_failslab+0x5/0x10 [ 780.330867] kmem_cache_alloc_node+0x245/0x3b0 [ 780.335489] __alloc_skb+0x71/0x560 [ 780.339150] netlink_sendmsg+0x9ee/0xc40 [ 780.343259] ? aa_af_perm+0x230/0x230 [ 780.347086] ? nlmsg_notify+0x1f0/0x1f0 [ 780.351079] ? kernel_recvmsg+0x220/0x220 [ 780.355277] ? nlmsg_notify+0x1f0/0x1f0 [ 780.359276] sock_sendmsg+0xc3/0x120 [ 780.363014] ___sys_sendmsg+0x7bb/0x8e0 [ 780.367030] ? copy_msghdr_from_user+0x440/0x440 [ 780.371816] ? __fget+0x32f/0x510 [ 780.375306] ? lock_downgrade+0x720/0x720 [ 780.377761] bridge1132: port 2(vlan612) entered blocking state [ 780.379471] ? check_preemption_disabled+0x41/0x280 [ 780.379499] ? check_preemption_disabled+0x41/0x280 [ 780.379537] ? __fget+0x356/0x510 [ 780.379573] ? do_dup2+0x450/0x450 [ 780.385970] bridge1132: port 2(vlan612) entered disabled state [ 780.390585] ? lock_downgrade+0x720/0x720 [ 780.390612] ? vfs_write+0x3d7/0x540 [ 780.390645] ? __fdget+0x1d0/0x230 [ 780.390683] __x64_sys_sendmsg+0x132/0x220 [ 780.390702] ? __sys_sendmsg+0x1b0/0x1b0 [ 780.390719] ? vfs_write+0x393/0x540 [ 780.424103] device vlan612 entered promiscuous mode [ 780.424310] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 780.442432] ? trace_hardirqs_off_caller+0x6e/0x210 [ 780.447485] ? do_syscall_64+0x21/0x620 [ 780.451506] do_syscall_64+0xf9/0x620 [ 780.455342] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 780.460553] RIP: 0033:0x7f552e82e8d9 [ 780.464293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 22:56:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x88a8ffff}, 0x0) [ 780.483218] RSP: 002b:00007f552bd84188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 780.490957] RAX: ffffffffffffffda RBX: 00007f552e933020 RCX: 00007f552e82e8d9 [ 780.498252] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 780.505548] RBP: 00007f552bd841d0 R08: 0000000000000000 R09: 0000000000000000 [ 780.512841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.520133] R13: 00007ffc0ce7a13f R14: 00007f552bd84300 R15: 0000000000022000 22:56:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x33fe0, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:56:00 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) 22:56:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100005000) [ 780.789411] validate_nla: 6 callbacks suppressed [ 780.789423] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:56:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xbc250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 780.901780] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:56:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x2000027c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 781.122354] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 781.139310] audit: type=1804 audit(1633647361.375:949): pid=25454 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1447/cgroup.controllers" dev="sda1" ino=14849 res=1 [ 781.422085] bridge1135: port 1(vlan613) entered blocking state 22:56:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x7ffff000, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 781.515691] bridge1135: port 1(vlan613) entered disabled state [ 781.630552] device vlan613 entered promiscuous mode 22:56:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100005800) [ 781.850080] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 781.904637] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:56:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0xfffffdef, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 781.987034] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:56:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:56:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xbd250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 782.130983] audit: type=1804 audit(1633647362.365:950): pid=25481 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1448/cgroup.controllers" dev="sda1" ino=14724 res=1 [ 782.277103] bridge1135: port 2(vlan614) entered blocking state 22:56:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x8, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 782.349675] bridge1135: port 2(vlan614) entered disabled state [ 782.461138] device vlan614 entered promiscuous mode 22:56:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x916c4db4}, 0x0) 22:56:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:56:03 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100006000) 22:56:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x22) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0x0, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x2c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x40810) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x22) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x20000116, &(0x7f0000000040)=ANY=[@ANYRES64], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfffffffffffffe07, 0x0, 0x0, 0x0, '\x00', r5, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x3e) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='afs_io_error\x00', r6}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) 22:56:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xbe250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:56:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0xf, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 782.903536] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 783.051998] audit: type=1804 audit(1633647363.286:951): pid=25512 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1449/cgroup.controllers" dev="sda1" ino=14870 res=1 22:56:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x67, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 783.160418] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 783.198188] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:56:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:56:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xbf250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 783.440862] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:56:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 783.594080] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 783.691379] bridge1138: port 1(vlan615) entered blocking state [ 783.738993] audit: type=1804 audit(1633647363.976:952): pid=25522 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1449/cgroup.controllers" dev="sda1" ino=14870 res=1 [ 783.768061] bridge1138: port 1(vlan615) entered disabled state [ 783.811995] device vlan615 entered promiscuous mode 22:56:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100006800) [ 783.965832] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 783.998595] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:56:04 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000061d0000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="2293238584eccdba5bcf4c3f405c7da1b099c9cda50bdb8d02065a94d728718258636360322998a5d872914b8c1ae294a3d121e86376b180ee9bd330b9dc316e080cb3008241cf5fa34d83de7f59173045bfaf7a3631aa1ae63b42453e3c5ccb06b511c3721b3e1f46ee98a23a4ac756c97b245be08b4d7647b39056b3e1440dd75cc7e501277de0d1f31dd15f576cbf8ef72a74c89b543126eaec05607056f0203e78114c8b1477e1"], &(0x7f0000000180)='syzkaller\x00', 0x80000000, 0x25, &(0x7f00000001c0)=""/37, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x2, 0x9, 0xfffffff9}, 0x10}, 0x78) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) getdents64(r1, &(0x7f0000000080)=""/66, 0x42) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x1, 0xc9, 0x0, 0x1015, 0xffffffffffffffff, 0x6, '\x00', 0x0, r1, 0x0, 0x4, 0x4}, 0x40) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000cf173bd0944aa700", @ANYRES16=r3, @ANYBLOB="d5dc00000000000000001500000005001e00000000000c0006000100000001000000"], 0x28}}, 0x0) [ 784.110908] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 784.220892] audit: type=1804 audit(1633647364.456:953): pid=25559 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1450/cgroup.controllers" dev="sda1" ino=14627 res=1 [ 784.511690] bridge1138: port 2(vlan616) entered blocking state [ 784.542405] bridge1138: port 2(vlan616) entered disabled state [ 784.608950] device vlan616 entered promiscuous mode 22:56:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x9effffff}, 0x0) 22:56:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:56:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:56:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xc0250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:56:05 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xe}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 22:56:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100007000) [ 785.090846] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:56:05 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00'}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r1, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 22:56:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x7, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:56:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x3, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 785.198177] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:56:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xc1250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 785.352130] audit: type=1804 audit(1633647365.586:954): pid=25596 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1451/cgroup.controllers" dev="sda1" ino=14875 res=1 [ 785.460360] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 785.655931] bridge1141: port 1(vlan617) entered blocking state [ 785.700732] bridge1141: port 1(vlan617) entered disabled state [ 785.766870] device vlan617 entered promiscuous mode 22:56:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 785.952064] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:56:06 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x280080, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xbb1e000}, [@generic={0x22, 0x9, 0x2, 0x0, 0x1000}, @map={0x18, 0x2}, @generic={0x1, 0x0, 0x3, 0x81, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @jmp={0x5, 0x0, 0x5, 0x0, 0xe, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f00000001c0)='syzkaller\x00', 0x1ff, 0x1000, &(0x7f0000000580)=""/4096, 0x8c7ceda693d5651f, 0x2, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000300)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x1, 0x1000, 0x3}, 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r4, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) [ 786.000275] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 786.119650] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 786.249067] bridge1141: port 2(vlan618) entered blocking state [ 786.278162] bridge1141: port 2(vlan618) entered disabled state [ 786.347534] device vlan618 entered promiscuous mode 22:56:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0xb44d6c91}, 0x0) 22:56:06 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100007800) 22:56:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x4, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:56:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xc2250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:56:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0xe, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:56:06 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@restrict={0x4}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x5d, 0x0, 0xc, 0x1}, @typedef={0x10, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61, 0x2e, 0x30, 0x2e, 0x5f, 0x0, 0x30]}}, &(0x7f0000000580)=""/214, 0x4a, 0xd6, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x9, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit]}, &(0x7f0000000300)='GPL\x00', 0x0, 0xac, &(0x7f00000003c0)=""/172, 0x40f00, 0xc, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000680)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0xb, 0x3, 0xfffffffe}, 0x10}, 0x78) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xc2000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='xprtrdma_op_allocate\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r3, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) [ 786.721397] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 786.794101] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:56:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0xf, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 786.843260] audit: type=1804 audit(1633647367.086:955): pid=25648 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1452/cgroup.controllers" dev="sda1" ino=14881 res=1 22:56:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x6, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:56:07 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000164f11f88bc29772b5d72bc5afe4230006000000000000010000c50000000eefffff8df5e7389319d094ad320b5b635c55e7167752a9061aecc89e5313a856f5025c27809294475ee1c4a6fb52793b4b5f0aaa650d456a9e0c6ebc85d7303e2dd05634dd1666826d24e25b5904527dd3537fadd052f6f93afea46b8dce5186025f6f75192724aae57012d2dfd17fbd26b4b2db92d650e9"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x1f4, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x94, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x140, 0x2, 0x0, 0x1, [{0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x69d4d3eed497a665}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect(0xffffffffffffffff, &(0x7f00000003c0)=@l2={0x1f, 0xdd3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x33, 0x2}, 0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000740)={{'\x00', 0x3}, {}, 0x1, 0x0, 0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x200}) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000ac0)={0x2, 0x0, @dev}, &(0x7f0000000b00)=0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r5, &(0x7f0000000040)=""/46, 0x2e) getdents64(r5, &(0x7f0000000080)=""/66, 0x42) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r6, 0xc058671e, &(0x7f0000000740)={{'\x00', 0x3}, {}, 0x1, 0x0, 0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x200}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000840)="e7b24a87fb2532ba51366fd7ab8e21c2d9d1b929dcc2c4a02510b3b8d83facac53bac400f9a7ffd196a8ff4aa155f6836b640f7531ad48acae6ecc044ab55f2b36c95bf692b8371875026034f66b8bdadc54a1a2e0bc647dcc5109729d612c78f3345918dcf9c815dfbf23f1a4680f1a8ac4bc9de938d64ad8f2f7fa797e9189e4c50234e318992c9aaba1196f1bc6d748c0", 0x92}], 0x1, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x2c, 0x1, 0x1, [r3, r4, r5, r0, r0, r0, r6]}}], 0x168, 0x20000040}, 0x4) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r7, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r7, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x4041) [ 787.138605] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:56:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xc3250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 787.378000] bridge1144: port 1(vlan619) entered blocking state [ 787.446546] bridge1144: port 1(vlan619) entered disabled state [ 787.511696] device vlan619 entered promiscuous mode [ 787.555067] audit: type=1804 audit(1633647367.786:956): pid=25651 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1452/cgroup.controllers" dev="sda1" ino=14881 res=1 [ 787.696921] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:56:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x7, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 787.762065] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:56:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x60, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 787.924418] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 788.165857] bridge1144: port 2(vlan620) entered blocking state [ 788.198955] bridge1144: port 2(vlan620) entered disabled state [ 788.257215] device vlan620 entered promiscuous mode 22:56:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0xbdaf3110}, 0x0) 22:56:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100008100) 22:56:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xc3ffffff, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:56:08 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0x1, &(0x7f00000003c0)="ddc5e45eaa674b5cf52cd92f3199e3aba058707cdb4ff333fc438facb9cd43a81f9f1b0396a8567a9a0b567625dec7faa0deb65b16b9da25646583a9ec78ede14c32f924297027539a782de0ebd3d3446a534aa609d7604df88615cf97723c46f9830281714ccd2c7bbdb6c22112d74ee6084752b209d34bd2c194542407eb10cafb7c617c1b4ec4e80810dbb05873075b04983eebee1b2ab256185200e50fb24c963a316dff72db536c2bf9b67be4d917df1b2461a43ea025838c9ce51dd502245e1f5f", &(0x7f0000000140)=""/113}, 0x20) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x28, r2, 0x800, 0x70bd26, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0x0, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xfdd0, 0x6, 0x2}]}, 0x28}}, 0x0) 22:56:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x8, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:56:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0xf0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:56:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0xa, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 788.734986] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:56:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x700, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 788.807434] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 788.824817] audit: type=1804 audit(1633647369.066:957): pid=25721 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1453/cgroup.controllers" dev="sda1" ino=14885 res=1 22:56:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000f9211d0f000030cc0000000000000000", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff0000000008000100736662002c00020028000100"/64], 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYRES16, @ANYRES64=r1], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r8, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 22:56:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xc4250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 789.121341] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 789.401982] bridge1147: port 1(vlan621) entered blocking state [ 789.431805] bridge1147: port 1(vlan621) entered disabled state [ 789.445576] device vlan621 entered promiscuous mode [ 789.479040] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 789.503812] audit: type=1804 audit(1633647369.736:958): pid=25725 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1453/cgroup.controllers" dev="sda1" ino=14885 res=1 22:56:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0xc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:56:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x10000f000) [ 789.714931] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 789.737564] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 789.814382] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 790.042055] bridge1147: port 2(vlan622) entered blocking state [ 790.073024] bridge1147: port 2(vlan622) entered disabled state [ 790.129659] device vlan622 entered promiscuous mode [ 790.179162] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 790.230210] audit: type=1804 audit(1633647370.466:959): pid=25768 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1454/cgroup.controllers" dev="sda1" ino=14871 res=1 22:56:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0xf0ffffff}, 0x0) 22:56:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xc5250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:56:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0xe00, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:56:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0xe, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:56:10 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r2, @ANYRES16=r3, @ANYBLOB="d5dc00000000000000001500000005001e00000000000c0006000100000001000000"], 0x28}}, 0x0) 22:56:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x10000fff0) [ 790.721998] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:56:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xc6250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:56:11 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r3, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) socket(0x2a, 0x4, 0x93) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r1, 0x0, 0x1, &(0x7f0000000140)='\x00'}, 0x30) 22:56:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0xf00, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 791.088679] bridge1150: port 1(vlan623) entered blocking state 22:56:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x1001a5baa) 22:56:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0xf, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 791.191215] bridge1150: port 1(vlan623) entered disabled state [ 791.309985] device vlan623 entered promiscuous mode [ 791.471339] validate_nla: 2 callbacks suppressed [ 791.471350] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 791.550272] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:56:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x6000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 791.683940] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 791.749600] audit: type=1804 audit(1633647371.986:960): pid=25830 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1456/cgroup.controllers" dev="sda1" ino=14863 res=1 [ 791.931592] bridge1150: port 2(vlan624) entered blocking state [ 791.985479] bridge1150: port 2(vlan624) entered disabled state [ 792.019391] device vlan624 entered promiscuous mode 22:56:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0xffffa888}, 0x0) 22:56:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xc7250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:56:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x10, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:56:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:56:12 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="e684499e9b4a6566950d3b40f15654c4e72ec86a500bc66fbee72594ccc3b1fe385d625c99f939c5e214883d2ef6c7345803a1ae108d9f84d0b9cfd315e1c3fb66e81b92737d4de2a261420de15a75a8fc8a0fa64456", @ANYRESOCT], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x40, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r1, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 22:56:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x1fffff000) [ 792.364441] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 792.405709] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 792.646677] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 792.689879] audit: type=1804 audit(1633647372.926:961): pid=25860 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1457/cgroup.controllers" dev="sda1" ino=14893 res=1 22:56:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x60, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:56:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xc8250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 792.967010] bridge1153: port 1(vlan625) entered blocking state [ 793.030585] bridge1153: port 1(vlan625) entered disabled state 22:56:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0xf0ffff, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 793.111439] device vlan625 entered promiscuous mode 22:56:13 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r4, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008040}, 0x404) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 22:56:13 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x1fffffff0) 22:56:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0xf0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 793.435070] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 793.474627] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 793.531636] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 793.746328] audit: type=1804 audit(1633647373.986:962): pid=25897 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1458/cgroup.controllers" dev="sda1" ino=14888 res=1 22:56:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0xfffff000}, 0x0) 22:56:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xc9250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:56:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:56:14 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095352c9694f1e4802a92f92198819dcf7bdbfde54946b512808e64f9bab7db131b"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r3, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 22:56:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x1000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:56:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x123342, 0x0) ioctl$VT_DISALLOCATE(r3, 0x5608) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYRESOCT, @ANYRESDEC, @ANYBLOB="0a00340002020202020200000400bf000500340056000000080026006c090000"], 0x3c}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000000)) [ 794.215751] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 794.269833] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:56:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x600, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:56:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xca250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 794.610479] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 794.806824] bridge1156: port 1(vlan626) entered blocking state [ 794.828416] bridge1156: port 1(vlan626) entered disabled state [ 794.877261] device vlan626 entered promiscuous mode 22:56:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x700, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 795.051274] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 795.089542] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:56:15 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 22:56:15 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x40, r3, 0x800, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@measure_req={0x26, 0x6, {0x9, 0x8, 0x40, "1b4c38"}}]}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}]]}, 0x40}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r5, &(0x7f0000001340)="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", 0x1000, 0x0, &(0x7f00000001c0)={0x2, 0x4e21, @private=0xa010102}, 0x10) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 22:56:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xcb250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 795.218007] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:56:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 795.439980] audit: type=1804 audit(1633647375.676:963): pid=25954 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1460/cgroup.controllers" dev="sda1" ino=14113 res=1 22:56:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x2000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:56:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0xa00, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:56:15 executing program 3: r0 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x80000000, 0x8, &(0x7f0000002900)=[{&(0x7f0000000580)="d57c393e4ea6600ac5bf797814ef8c55c0410bdb45d096290a7f426a82fa44eb5d0ece2c9b8f500e7ddec2ed04bc17f3a0bf1c7bd4f89643a832cd76eece8a4ed6c3906b0c28fb16a752b1c36887730de5dd6524a42b9e409eb903a4feac889ef5a4957955e9b33e8050b2420d0b08850f333b6076685f23d44d503adde3d5b1ac272e48a627f0cdb02692ecadbe9d1712d5402b4bfb44ee531fffa9bd5729dd4a60003d5f5a49f7218655107ef92bb088de24da4808db303aad8b0d64517228915a4087488db343c9e62996435deaee6f6f13249b7d1092765eff12a71d07c9d3861b3c4e426245ff4e858dd93a4b1aa5b1d902ca51ba690a63fc3069caa9dd8fd26c6ebec9d66d40096e5805cf60db2a890ac09dbaddd0227c308c37ef13331e197975ecaea9191f06d4b5410e8f9ab1a266ae983d165fa94ff15d4243544d06003c5c1c5500787ea6e2610dda525af49142c8eddc96b49f59dec1eb0c2fc5a7f7a51d42191ba6a56d580cf52627c5e9ccd913de27a3bea092b67a7aebdf00d3d120e4b9b22b24402d63495b72efa008a7f50ce4c2e7d2f519258db112dd258b298c7f53d6e4971ae9c16876d3ca60d5141344f953fc29de104f69ca41e4770159858d9e2cc80d892573bfaee9ea4984e99c489482feb19c483bac8b0ef3847c3b4fb455312c4545195d0b9bc3e02adb6d70adbda47918a6ff09e8be7af1e7025bb71f13c8ab81a75a1845452cfe221d0e6de49bee9c5a34b9036abda11daf5c39d7a06b18ceabdd266eda09bef107ad4f9502a79a96c4b514a45b29837a1d3556e69492007285aacd0d38d5c01860a57f8e3879da5abdac75cb9d902a7327d72ecf916f4de65c7319d1f2b07762f006b3d3eaedd9432526e7d7db063a1185d3b7f974a32e36209c637fbb3792de80bfef4cf4dd50f5d4570ea35118e6c0c56398130235e0d88e24a6dd8e152520c203f04d30aaf11683511d8ec015fe71bf056b8d692dad917d7a90535c74d3c7f4ab3cb9fcf6fd509c5bda6051a3839a9670b3314370844fafd72e34e96a2926055abc669aaf991f806445c31b63c5a12a8adbaad007069c9b9efb1087e2ea2a79c626350027eef9e52f32677c96b7548f7c5d96b5714f3266405e5047c7a7908c1f6f5d731d7caa440adc3815f71188c58ec88ce3450ae096133ba27e96759d1fcf0f59b0e64c6a7de9a7fe77027e9ea83212ee4c0150489ac61acdd16cf1069eb1e1ee6c4c4c1e09d9a3a508e2c4aa800a8029c09896f2622cfb9d19e996d5c2273a6692b2b98edf708ec0c2fe8cdfe480fb4c684adec8737a396fb12c6a40b557a66100decc9477e70368c89b45eac8baa80e9049c698bcf0aa2a84e63cc35b8cdf7f6c90d16b320f300bcd4854d39bc5cb2173ae212290c9be24bbc39224a33e65c01606575744c8fdbce6fc474eb22fe73bba709430396a26ae39ef2d26763f9e20a32304307bacee64dac9c6612cd24bb3d32ceffc830ba2f216658001d97919a52a386f00cfae7c0adb55ba2c0cc76e23b2a44ac1f05e68e8d4d8d83b6332fe764988bf2286951c2361f9875ca07a872e6c7991cd11d701ec44a300a0bbb6a0f68a3b9eaa7c54ca848b7289a062d789825a851af8fb2f477eafc6d4cb58d09f82d05a2f5ba877d156c69d63b40a180dcef892253f38ad7ec6958217ec85640f34c543a59b75e946d600dc9f9217e32637d04ec5280790b8f61840fd35f17b8d92fc6a8cecbea3c88531bef7c297128554229ac6f208958feb435f26d4928a12c0ffc3a4f5799e6d103ca18458873c5167f5f6dee57beba68cd10b1c0a52a37d17e6ab87178157f8e6c33861ec2be2cd074e51b581aa0bff4bd9ad90bb0d688b48a9d17c8c575d6bf3959a0017718caa5c15af871fd8fde36575057cc087c82e08d34bc3cb253622844b997a02c63fddcf7e50245ac182a5a3054b230022c6b087565b7277fc443f7e82fbf8901c184c5668d96e05ebdba4114c330315c0d235fca0d6305f03d7685d75c04e9a5a215c83c7da3bc56ee31a4fed3c3a83831971beb445fda229e0acf5c91420bf1f98535b36158b3f6290b71742f1e23d43f9d193831c6cce02ab36c1d8ddeb7e4071a44d2b935def18b941e16ec793b9e9d1781807dc28a662975651eacf3f0b558ed77a0bde8c176fb30e1e3ca7e239af2e9d5246c18b56cd7f536f2717f6e4c4fab10e61ac4343082c827ccd00fbbc790b6139981fbce791db17cc932d802b81d98afef7cbf40d56168127b627bea355d74cc1626d06cce8d6b9c961bc532eef6e04e879687cfd354be55b7378bff142656080f282809f07afe77f6dccad4fd26e7a84b44658f6829f3655e403fdd10a35be778ed8d93db367e58067065f0fdd2ff6e8a0ea9721be6bbf3c364dfcb2cc5998a50b87fcc15b8b077b487498dbfe0b48de3745120e7a2accf099cab4db76bf8edd97d4c007932c14428acc924515cd7b2b189e1468fe4a2ae587ada9444edff474a85aee0566e910087ed27c9ed2f79f71ab2c1c6153e05decd301bbc47064c29cbeb0790101b68a0efbdc3afa1cd5656da00bea93e785756caf254de860528cae78ed9802e7d0b1b33bc4c293cefe5f83d45f11c57d21c75a2cb90213b693998ac29bc06eacc327bec93b8046dfa73f42b8415282b78e628bd57ec7a6d16d85ea94017ffe552d32a893d465ead3106caed2a7042bab06fac02dfd88bab85eb6245631d2b053ee92cbefe41b6f5db592d42616f7b23b97cc5a85e3c6e6d80c38ca3464b5bc57e0f00bd6b050c2f2a92816f630e1bd44002f0dc76c74baa1af939e3aaabc0f53b9a94fec915ad1f4c215f7b605d9abe2383e61758de152184ac91c0249fe174067a7a0a5d6470365ab63bc4fe3205de98138fd44b95600b744b554b6a8cf4541ffd52600f4c1db5cc3c0f8b249efdc91b8cdcdffdd197df4ee68e9890ddaed3e1d464e499ba38d5a04a0b741d5ddb1bb29b11f7bcf7eac644717675ffd05735cd372b1296bc558a18d0ea5684eb33021bae26366ac742f747cf9860343971f010bfd8aa3cc628ba0837be797d744882ad7aaffa98f90def6344905cd8e8f9606c3d38eeead290993435dadef4a3f29c7d51549f3ae887146a976f5412ce3df88f4612e17d911b654dcf5b132b161eb083c3c638395a19327522a1a9976d0e86d2b809cd974bc47281b3348e593a03faf890f8d53e9626407b239a4cf90438d12c8b8a567d59dbf820f336a07996abc8300a4ddeea189145cfd516e434ca57ce9f0fd8171dc94540bff22ed99c9b749700ef06ff0b4d0379aeba158cd72518309a6fb589991232e4b701a81879d75d8376902cefcf2e0f26d4e79491230db449acc3130f2f76d51a404b9c2937c5f5953bac046b3e53035bc642acc55e250b4e6acc9dd3fa0a69105d9ea9a91eed67ea57777adaff0b5c2de2c31f4d430da2c58dc8ae5c36c225fdd55b71e64df540cb7ce1eff48f0c1df9c2dcd2048b0b8ebecee94de8473f4681886eb2e3693ae9b6dea8036acde7fe224dac789b2b2afb6183ae5d038e88074a39401fcc29ea27cef68ecad9a622f74a6df408a79b843f42d4155ff726e58bf19998660bac6427e25df233d882ebc75cbbad967cebd56c29d730b7a8e3f647bbe8414479e250aea7c18fdc4ede69736039e9e5d9756d90a03195edc004b85c4f9b0e3575ea71e33bc470771e67be43b79148c1cca86b4b640de09a8a443f5459dd00bc92c328ec4c5d3ca76ea48f824955a586f6a63c1a15929e0c03a74c08cf97d5ddc1545bee26db479c8bb591e9b806dc373a86bdb159cecc6c049537d0fc77ee372cab2e196550afb05b4421987a7f4bd171b6a53b0e0297f486b0d48626dabd2356ffce0daa6cf52fa8bf9a268e5120cef71ceb3b0a66b7523030e6a1f65a0c15e61f73ada8ec3398f5fc9c776a8ed99cf8b5134a93fc2f6da5bc36bc3b8048d2fd4b9e10aca428b48adfadf9f69908ec78c9ea6ca73860d3a1699e51151c06c0c182fa85fffd9d78e0f30d28bcee89faebe6e0e7715fdb5d739aa2dc05237e683f03895889412a6b1c662b08d773354b2e8a13531fc74ec6f47833a674bac7e93b6354238b6e4bcf7492e575243ee3e4e15d2af77b5c3543c537f9d0324b847f13821ac31af4998d1740bab5b789ad52b4f66c9c888690c125ade88690b9bef4a101e44137e9ebac2b32946ea5e41c7f5a2a5f67b62873aeefd2293bd8b60b650937ac4a66aa070322e9b4305c797772717bfb0c7866fac929a318ba742cfad9ede474d58271d182513b8d1484b9694968e3b2493b619a9fdfc8229a4cc600bfeaedf5eec775ec23ecb1ca208f08524d5df8da5cdf95f2110bba163f82555bec55b3b3914b5f4bcb919967c0aeb184a1fbfc8e6c199e5a90f778fa47520cfe5624c60eafddf02aa4f39691ed49f92c1603b342dc3cae911181f1e22ca26fe930f792a1f5a101fb2749d03f8062125134d500df7e0abc15e4b36aea915d65836dd731fbc2b90b2874222eab5a1a2c215df48122bb04a0d26991dfacfa50b5bf233d26e9a850f90dbf28d3f1a017e97b7bad0c5d485f187465f05a86fe4ba690af428316abc4f2dfd2537f5462917e3d020b4541b1dd04b60aba7ef283c8225748d6dd6a11e7b003868ebb9cc0b150542550aba5ce944edde617891c799c72f095f496fd17a9db21e5e40150ad1998978266901903f15f6a62d4c147e10b3c3bb93d1c0684b9d4b59ac0a5e09480a324530930eecdf7f2a18c0c883b5e2aaad76ab17f9a37584d37409d93f064d63b99e71b481092ac0d6dc0512a42cd7d82cc1961a1c3ef8065632be13ffbe8c5ab5c520ad1ff593e01d5ac90e831449c68e312c7cf86cf7ba82506e7b083978fe7606f44b8297d2294689c1ec50aa07d889450618de9ac0c2f0bfecfcce8747d85f0edad5089f96fafbff2275c7a665aefd2a6eef13fe8a69ae7e908d5dfab2d3f9b720c6d8a81f7fa46950a4d4f96ae15fd509426186cb67691dd5b6524aa0d65850c4f3369e2a87881293467322d8a7055053734ecddb87ffb0918bbf7b25db8e25ac053feb3401d8a11c80d4d395314fda0ba12da8fbdf8629d4c88f1946a82bebd3538287efbb49ddf4de95064b18b7d02377e06714fd984f2b789acc01793f4405e63b8d598e2dd1708c02e4d2ad6eb84d51126d80888214a821b5ad1d5dfc02a124bfea38572866ee6076f7e4e1197a215ce633aa879dd7745f8b8d006210adf0f463ba06dc6392c8fd1f7e5948e4d85355368076d4d395c32b0b244a999ae9803a45a165a9d409de0a1e99ae456c6e8704f562afb6ac709d266ecec88ac14a7b7be7f4a94cc7f9b53e3773d10b09d62b3f830339d207e68c3b59759b2df73e1e1b6d11d0d98d023bd086f756fcc98c23328ebbadba637b9fd36175a06f5fbf201947d3bf62ce5eb53afaa3368ee6834edd6ffc3b61fffdd811c7fdea7801708e60bd4b79464031d0c3f0cb9c6b1db858a9f4a103eff4b2c9adaba11c515a0cdaddd4c9ac02dcf9c8bd40339331829e8d75b8b52a0cac8b128696d37d5c2695214ee15183772fb060bca0c660e01890d4628d0b8784b1d5704c69be011627490d3048c5b3d59f5d9ff7146d38aed8bcc4ea97d83ed9516d6b08046de213e7558cd45e60404cb1d9a86757e3fc765b31039d793ea8bbdc931cddc9abf4630b8c1ba6fa8843cd11757f203bb79456bceec774e7deae2c9d3574be78af724811fe21add6562c7f5bc9d3dce5614e24", 0x1000, 0x5}, {&(0x7f0000001580)="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", 0x1000, 0x3}, {&(0x7f00000003c0)="6c2a39db9adc488b0cc835eab1acb42bb153dae958ac6d71bbe2767efa2868bd9a25e9c1d96cf8eff3f787908e90a60793506b62dfe1bac7d6c2629393703839428537564222898bc1bc7ae5622b732a167123e324024d2d8b046370fcc6641b94cebce0d0704ba2778f966d7ec293092e224e03640bf85947e4aef32f6f44855b4d46a7316d506ef2bd22147c0c749fb8e96591a5a5c67ebee1b7fce36a1bda063a5bb6b7478bc0d7b8aee50c1625b232e6c806cd5a4e190be84c71929baa8d909ea8befa8b0e62be361acc0204926399d674fda9eeac4bfbf917afb42b024b9bef5769eb", 0xe5, 0x1}, {&(0x7f0000000280)="71774402a17e62e4bd7ed2fac917d8ae7d82c056c5267e530463b8893386ebd0e0d9d168ea2b9019031ee3fca23389d1098a331428532a30fecceae35e2d910ae26344c5d3bcfd270f", 0x49, 0x7fff}, {&(0x7f0000002780)="73316990017f2027e452809b0575556e353317de5ae98a9082af882dd36ab5e624cde479c5158ea139dba1b3c17726bf5db7486ff4f167cd95986a09d0d2b052d77e1f3b00"/84, 0x54, 0x56}, {&(0x7f0000002580)="0a42c2e8006997c45f64f008e6d760a8ce593fd386312b08eb56756a25008e2a842e2533125793839dea3cebd4c898c9f21f88c18691b2c148c678e720e961c1ae1fccae51caad8a4a1b2974d8245abc95c09a87b6632d62a20e2afdab5e9a05", 0x60, 0x1}, {&(0x7f0000002600)="f68e1309fd1ff00a1a6fdcb2e3c445ec123e904ff39a3e7072fdc389fb7c3b3de70498a6f09c1591d01e2620f7215343f0e37bd58de1714dd93f8363552810e485dfb90eb0856c5cac82d7fd2a20178fb9425b548af0a06ad4a52fab54a15d51baf4c6d21b8f77bd17851669cbd521bf621ec2fb13f588426f099c74334ff6affe7a8c09f8fbd229444f07ccc7f107b3d2d4d222946b5bbd9c6442", 0x9b, 0x6}, {&(0x7f00000026c0)="2a4a53038e6fcac235b5edff718c7ae862b11e94ea3ad1a495bd5b6854ed0cd95ba118e1b597fba846c12f6235a597e7a9e39532b8768bf961630d1cd3d85af3b616e6d9de0b753dbb936b663b2f3e2ff0e2a833b9dc569fffdb758df1bee41aea9aead4640c801268181e5706a1a2c3e9612308073d7bac0a86407463edaa0dc99fb2b2d1593d740156ec9553af3b90f245f2ec952d40854a296c9211abaddcde6fedea2e8d964ab6c866f6a673c9425e", 0xb1, 0x100000000000005}], 0x0, &(0x7f0000002800)={[{@fat=@nfs}, {@fat=@errors_continue}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@fat=@usefree}, {@fat=@check_normal}], [{@hash}, {@fsname={'fsname', 0x3d, 'ns\x00'}}, {@hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '-$-$)]}^^-+'}}]}) fanotify_mark(0xffffffffffffffff, 0x38, 0x8, r0, &(0x7f0000000300)='./file0\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000029c0)=ANY=[@ANYBLOB="1800000000f90500000000000ec700ecd40000000e0000009539e22c5742e01bbbf8ff8fa220f8c87f9362aab0df7c62a6b9faa93a9054c0ea638e90a6389b2b76eb893e8dffd436eba1d02f9b35cb0dd12725367085b0c09b1392075c40afa8b643ddfa56b9671e164651c20120d1dfcfc0734ebb06dc1b0000000000000000000000dc59d5730d99ae1c2ee989ff3e7a7e4f7cb4f2036503"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f00000028c0)='./file1\x00', 0x274000, 0xd1) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r3, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r4, &(0x7f0000000040)=""/46, 0x2e) getdents64(r4, &(0x7f0000000080)=""/66, 0x42) openat$cgroup_ro(r4, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) 22:56:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xcc250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 795.729641] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:56:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0xc00, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:56:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x4000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:56:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x4c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x4c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f0000000180)=0x4) [ 796.037442] bridge1158: port 1(vlan627) entered blocking state [ 796.097953] bridge1158: port 1(vlan627) entered disabled state [ 796.130405] audit: type=1804 audit(1633647376.366:964): pid=25987 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1461/cgroup.controllers" dev="sda1" ino=14066 res=1 [ 796.206154] device vlan627 entered promiscuous mode 22:56:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x7000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 796.435666] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:56:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xcd250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:56:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0xe00, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:56:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000000000000000002b00000008000300", @ANYRES32=r4, @ANYBLOB="0400460008005180040000800500340056000000080026006c090000"], 0x38}}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={0x0, 0x4, 0x2, 0x4, 0x9, 0x3, 0x0, 0x101, 0x7, 0xffffff81, 0x9f, 0x3}) sendfile(r2, r1, 0x0, 0x100000002) [ 796.725366] bridge1158: port 2(vlan628) entered blocking state [ 796.788261] bridge1158: port 2(vlan628) entered disabled state [ 796.838472] device vlan628 entered promiscuous mode [ 796.988995] audit: type=1804 audit(1633647377.226:965): pid=26017 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1462/cgroup.controllers" dev="sda1" ino=14353 res=1 22:56:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0xffffff9e}, 0x0) 22:56:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x8000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:56:17 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) 22:56:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0xedc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:56:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xce250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 797.301034] validate_nla: 4 callbacks suppressed [ 797.301045] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:56:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0xe000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 797.401211] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:56:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x0, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}, {0x0, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE, @NL80211_KEY_TYPE, @NL80211_KEY_MODE={0x0, 0x9, 0x2}, @NL80211_KEY_IDX={0x0, 0x2, 0x80}, @NL80211_KEY_CIPHER={0x0, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x0, 0x7, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x0, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST, @NL80211_KEY_DEFAULT_TYPE_UNICAST]}, @NL80211_KEY_SEQ={0x0, 0x4, "b698c4a32dffa05657bf"}, @NL80211_KEY_DATA_WEP104={0x0, 0x1, "78bb8329a45f462e7de960179a"}, @NL80211_KEY_DATA_WEP104={0x0, 0x1, "5b6fb39c41c9ac8336221f791c"}]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x0, 0x2, 0xff}, @NL80211_KEY_MODE, @NL80211_KEY_CIPHER={0x0, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x0, 0x1, "484855f2c2"}, @NL80211_KEY_TYPE={0x0, 0x7, 0x1}, @NL80211_KEY_DEFAULT_MGMT, @NL80211_KEY_DEFAULT_TYPES={0x0, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST]}, @NL80211_KEY_MODE={0x0, 0x9, 0x1}]}, {}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x81}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 797.630673] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:56:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents64(r0, &(0x7f0000000080)=""/66, 0x42) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000180)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e000000959f0d74e534d3bfec0333fc4f7421de2c6377181be0d4030f75f025f7a20294cf7a33b659414c6fe66f64f67c1aa3432ae3f87551277e73163bdafa6ad68d8d22ee711ee0f29496dbb1b41f9d8baa6897011cda4962c9a5171e6b955af2f8b8b6f553fae0c8e20d66733ec2ea3b24b1488479cc81469dd78796ae92c8bf2d9eecb37e7f59b0f98df921a67e96e6aba18e9a3a693a9e0cbf764dd925ce21b6ab8af6f1da6e2e39c3e96a50cf977a84bc545ea073c66e72b9c53fe2"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r1}, 0x10) getdents64(r0, &(0x7f0000000580)=""/220, 0xdc) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000800)={{0x3, 0x2, 0x77724fdb, 0x2}, 0x9, 0x3, 'id1\x00', 'timer0\x00', 0x0, 0x2e, 0x3f, 0x5, 0x8}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x0, 0x18}, 0xc) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000004c0)={0x0, &(0x7f0000000100)}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r5, &(0x7f00000012c0)="0d268a927f1b6588b93e480b41ba3860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd60da03059bcecc7a9544fa3a07e758044ab4ea6f7ae56d88fecf9141a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r4, &(0x7f0000000280)="808074cdf29f20f828cd4f03dc518ac5d2579835698385efb57205ff5b79aeb7ea2be1ce03582bfce4fba749b2d0a7203db4ad37f2ec6a4fe149556c665449e60a7a74a0129e19310a8465e8d1251429f000e2c4b01986b2dedc6095e3981c2ed30bce166982359cb5106fa0a5e9d5332d27ce09a5d1e2ca8777bbebcf365f0c91dc205e845b5cd6ff24b51b0c248acc7e4f6c115130f91fde21132efa3192762706fddc66a416", &(0x7f00000003c0)=@tcp=r5, 0x1}, 0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000440)={0x0, 0x7fff, 0x81}, 0x8) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="764989014b6deda3056178e8f1543e8c28200000", @ANYRES16=r3, @ANYBLOB="d5dc00000000000000001500000005001e00000000000c0006000100000001000000"], 0x28}}, 0x0) 22:56:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0xf00, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 797.836537] audit: type=1804 audit(1633647378.076:966): pid=26046 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1463/cgroup.controllers" dev="sda1" ino=14113 res=1 [ 798.018776] bridge1161: port 1(vlan629) entered blocking state 22:56:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xcf250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 798.071741] bridge1161: port 1(vlan629) entered disabled state [ 798.155502] device vlan629 entered promiscuous mode [ 798.260652] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 798.327497] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 798.398978] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:56:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0xf000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:56:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x5865, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 798.605603] bridge1161: port 2(vlan630) entered blocking state [ 798.628094] bridge1161: port 2(vlan630) entered disabled state [ 798.687998] device vlan630 entered promiscuous mode 22:56:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0xfffffff0}, 0x0) 22:56:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002b00000008000300", @ANYRES32=r4, @ANYBLOB="0400460008005180040000800500340056000000080026006c090002"], 0x38}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r3, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe7, 0x1f}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000082}, 0x40000) sendfile(r2, r1, 0x0, 0x100000002) 22:56:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x60000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:56:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x6000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:56:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xd0250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:56:19 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0xffffffffffffffdf, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2c0080, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='qdisc_reset\x00', r1}, 0x10) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000280)=""/152, 0x98}], 0x1, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000880) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r4, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r7, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r7, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) [ 799.154620] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 799.167893] audit: type=1804 audit(1633647379.406:967): pid=26089 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1464/cgroup.controllers" dev="sda1" ino=13987 res=1 [ 799.199289] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:56:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x6558, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 799.527021] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:56:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xd1250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:56:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x9b810ef9, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:56:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r7, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, 0x34}, 0x1, 0x300000000000000}, 0x0) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r7, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}]}, 0x34}}, 0x20040001) [ 799.891465] bridge1164: port 1(vlan631) entered blocking state [ 799.930264] bridge1164: port 1(vlan631) entered disabled state [ 799.976999] device vlan631 entered promiscuous mode [ 800.100127] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 800.129021] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:56:20 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@ipv6_deladdrlabel={0x54, 0x49, 0x800, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x20, 0x0, 0x0, 0x3}, [@IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040080}, 0x84) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 22:56:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x8100, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 800.197025] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 800.219203] audit: type=1804 audit(1633647380.456:968): pid=26140 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1465/cgroup.controllers" dev="sda1" ino=14050 res=1 22:56:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 22:56:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xd2250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:56:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x9effffff, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:56:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0xdc0e, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:56:20 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="d5dc0000000001000000150000005621f1ef1191f74e05001e00004370000c0006f10000000001000000"], 0x28}}, 0x0) [ 800.819011] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 800.860887] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:56:21 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r4}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r4, 0x4}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r5, &(0x7f0000000040)=""/46, 0x2e) getdents64(r5, &(0x7f0000000080)=""/66, 0x42) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000140)={0x8001, &(0x7f00000000c0), 0x4, r5, 0x3}) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000087b5900", @ANYRES32=r9, @ANYBLOB="0400460008005180040000800500340056000000080026006c090000"], 0x38}}, 0x0) sendfile(r7, r6, 0x0, 0x100000002) 22:56:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0xf000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 800.929433] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:56:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0xf0ffffff, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:56:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xd3250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 801.219845] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 801.445738] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 22:56:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0xf90e819b, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 801.535760] bridge1167: port 1(vlan632) entered blocking state [ 801.586023] bridge1167: port 1(vlan632) entered disabled state [ 801.675061] device vlan632 entered promiscuous mode [ 801.850188] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:56:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x34000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:56:22 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) r1 = dup2(r0, r0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @link_local}, 0x10) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, @l2tp={0x2, 0x0, @remote}, @xdp={0x2c, 0x9, 0x0, 0x7}, 0x9, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)='veth0_macvtap\x00', 0x8, 0x7fff, 0xfffe}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000ebdd477cbf6c8d540e2a305bc673321ae0c6239e5a76ce3822b414d074d43505492b4c3efb30af2e53611ce78587b3638f6356f9df71364742d8146f908244880172337b7901c87ac9ae56b0a6135755149b9da58bd3367a1e358fcc088413a5c6", @ANYRES16=r3, @ANYBLOB="d5dc00000000000000001500000005001e00000000000c0006000100000001000000"], 0x28}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) [ 802.101026] bridge1167: port 2(vlan633) entered blocking state [ 802.158379] bridge1167: port 2(vlan633) entered disabled state [ 802.239460] device vlan633 entered promiscuous mode 22:56:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x100000000000000}, 0x0) 22:56:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0xfffff000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:56:22 executing program 5: getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @loopback}}, 0x7, 0x324, 0x0, 0x4, 0x88, 0x4, 0x6}, &(0x7f0000000400)=0x9c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000f1420002abd7000ffdbdf250800030000000000080045006d61640007e40100020000007bbc90a8561b36aefeddad2fa63efbcfb1c36aa44d453b84ccdbafcba6ddb9bb6c77bc9fb15e920449e3d187205cdd99dbe3a0ec722833d118d610cfd8d6668f35290331258c3f4885a7f63735ca604fb2d4"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x805) r1 = accept$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @empty}, &(0x7f0000000700)=0x10) write$binfmt_elf32(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c461f05ff0401000000000000000000060000100000b300000038000000d4000000090000008100200001000600008000100000000000000060ff000000020000000500000009000000ff7f0000050000004d040000ad51f55c2a37870d71aa0776d8c187b2e11218e67c487518eb14cbb5e984a66b97635d65aa43f00825dbf49a7809a6a89c9d5457d9b79786a9850afc98e941a6d5f4aabae0ab2ded40d1a4f853e013c3c62cf16bb7eb665189c1e69c8926d321cec2892232582ac3ffc61268e1230ebd492c7c4172aae8b2d57b157e18fa0ac8bc88cf41c855548181019ee7e0db13550ccafff0fcc0631c499d8c00e8f4815bc4641de98048059d7b5bb8cb1332d1810a984e3abf8d1921d4428bae0dd215e1fd6fb6de2f2c5dccf700"/1057], 0x421) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) fstatfs(r2, &(0x7f0000000280)=""/43) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000002) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580), 0xac882, 0x0) getpeername(r6, &(0x7f00000005c0)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000640)=0x80) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000180), 0x2, 0x0) 22:56:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xd4250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:56:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x400300, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:56:22 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r5, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r7, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x30004}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001600)=ANY=[@ANYBLOB], 0x20}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r9) sendmsg$NET_DM_CMD_STOP(r8, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001540)={0x14, r10, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r10, 0x300, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc891) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r3, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) [ 802.666265] audit: type=1804 audit(1633647382.906:969): pid=26226 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1467/cgroup.controllers" dev="sda1" ino=14241 res=1 22:56:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0xf0ffff, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:56:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0xffffff7f, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 802.731054] validate_nla: 2 callbacks suppressed [ 802.731102] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 802.818009] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:56:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 22:56:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xd5250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 803.068065] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 803.157114] audit: type=1804 audit(1633647383.396:970): pid=26256 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1468/cgroup.controllers" dev="sda1" ino=14081 res=1 [ 803.358558] bridge1170: port 1(vlan634) entered blocking state [ 803.420291] bridge1170: port 1(vlan634) entered disabled state [ 803.527917] device vlan634 entered promiscuous mode [ 803.707000] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 803.768221] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:56:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xd6250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:56:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x1000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 803.836355] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 804.066504] bridge1170: port 2(vlan635) entered blocking state [ 804.134584] bridge1170: port 2(vlan635) entered disabled state [ 804.187754] device vlan635 entered promiscuous mode 22:56:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x200000000000000}, 0x0) 22:56:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x2000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:56:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0xffffff9e, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 804.728038] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 804.798676] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:56:24 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r1) r4 = socket(0x11, 0x800000003, 0x8) bind(r4, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) r5 = socket(0x11, 0x800000003, 0x8) bind(r5, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x107242, 0x0) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x50000, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x4000) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0xbc, r3, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x28}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}]}, 0xbc}, 0x1, 0x0, 0x0, 0x400c810}, 0x80) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 22:56:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xd7250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:56:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r1 = signalfd4(r0, &(0x7f0000000080)={[0x6]}, 0x8, 0x80800) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, r2, 0x857493b182b05365, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0xac, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xbc}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfb4}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffe}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_NETMASK={0xfe35, 0x9, 0x16}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x0, 0x9, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x0, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fff}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40084) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000380)={@dev, @remote, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb0, 0x0, 0xdf4e194e9f292ea4, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000100000000000002000000000000000300", @ANYRES32=r7, @ANYBLOB="0400460008005180040000800500340056000000080026006c090000"], 0x38}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) write$P9_RMKDIR(r0, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x0, 0x3, 0x1}}, 0x14) 22:56:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0xfffffff0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:56:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x3000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 804.988363] audit: type=1804 audit(1633647385.226:971): pid=26314 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1469/cgroup.controllers" dev="sda1" ino=13987 res=1 [ 805.118798] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:56:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/67, 0x43}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f0000000200)=""/140, 0x8c}], 0x4, 0x0, 0x80000001) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000b5e213c9a77aabaac030", @ANYRES16=r3, @ANYBLOB="010000000000000000002b00000008000300", @ANYRES32=r4, @ANYBLOB="0400460008005180040000800500340056000000080026006c090000"], 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 805.494952] bridge1173: port 1(vlan636) entered blocking state [ 805.538369] bridge1173: port 1(vlan636) entered disabled state 22:56:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xd8250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 805.628050] device vlan636 entered promiscuous mode [ 805.716683] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 805.770623] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:56:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x4000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 805.816662] audit: type=1804 audit(1633647386.056:972): pid=26329 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1470/cgroup.controllers" dev="sda1" ino=14241 res=1 [ 805.956409] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 806.157548] bridge1173: port 2(vlan637) entered blocking state [ 806.176541] bridge1173: port 2(vlan637) entered disabled state [ 806.226151] device vlan637 entered promiscuous mode 22:56:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0xffffffff, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:56:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x400000000000000}, 0x0) 22:56:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 22:56:26 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r1) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x800) 22:56:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x6000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:56:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xd9250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 806.708667] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 806.759097] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 22:56:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0xf, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 806.969822] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:56:27 executing program 5: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x208e24b) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) [ 807.287570] bridge1176: port 1(vlan638) entered blocking state [ 807.300525] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) 22:56:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x7000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 807.399359] bridge1176: port 1(vlan638) entered disabled state [ 807.489318] device vlan638 entered promiscuous mode [ 807.734327] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:56:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xda250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 807.779143] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 807.884261] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:56:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0xc0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 808.039266] bridge1176: port 2(vlan639) entered blocking state [ 808.070673] bridge1176: port 2(vlan639) entered disabled state [ 808.157601] device vlan639 entered promiscuous mode 22:56:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x600000000000000}, 0x0) 22:56:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0xec0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 22:56:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x8000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) 22:56:28 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_mballoc_alloc\x00', r0}, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x34c28a6d953bdcd5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 22:56:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) r5 = openat(r0, &(0x7f00000007c0)='./file0\x00', 0x8200, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000b40)={0x2c8, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x10001, 0x67}}}}, [@NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2b855d2be23e42999574da408a344b33"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c009861e78a6d69cc6e408933df19275"}]}, @NL80211_ATTR_REKEY_DATA={0x104, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0x0, 0x3, "ff2350aa2bd50a76"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f3316d12de9cd7b0044c4d6845b8e0dd7c74f763eef00a1d6574179226f1fd93"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="caae38c288d034b8805d38bbbccc00380f767b8dc117cc8cc916977ae6f4d4ca"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f0db62fd664efbf716d61f65c896f331"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5c5ff6652c10048b812eefca97d218d60d3a1b474eb8dd6ed992ac79bbed1b0f"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2bcf71a850a6fa166be35c95660c7ef1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2a09fafef234a18a38d8d5c67c38020c6ca9f6ff6e2fafeb29cb9851c4f02c4d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="8cc32d74e944747e1033396987d6eceb1359f44588576c23c5f5624c6f2e1244"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}]}, @NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6d0e91c0920a739797afbb0774c11ada"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2aef36836b65cb75"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="579374fe24d6980ecf2eb253cf1c1680ab37904609f656ebf27f219635bab5e8"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ab4a493247ef325d"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}]}, @NL80211_ATTR_REKEY_DATA={0xda, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6363c1763a2c5d48081423e5837c2903"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="18b926285b7fbc9fdc79a75eb9e06fae65fe9769c50b476d"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="16b599fb380d3eaaa0977b28a02e2788"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "757df2aa8bd56232"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2346c37e4239c5d311dc0c0cb8fcbcb09f7ebfd65dc480d111739a9f8c86caea"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6e0f1f5ef576e354"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "67de455b13f6bd46"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7c4f01a40f7ec988"}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c6d24a506d5fb30fd3bbc530fcc2839512a6fad9329218129f9b2cf41335065e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4292375efe3b51f9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e1824fa6122bcb9f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c80200dea1507c6113e6b327588f963300222b3bdf411f6899a27d4c15b354c7"}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x1}, 0x24040010) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r8, 0x63, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @void}}}, 0x28}, 0x25}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r8, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2c}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 22:56:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xdb250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) [ 808.494427] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 808.570333] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 808.668745] audit: type=1804 audit(1633647388.907:973): pid=26424 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir258383048/syzkaller.DIuYQw/1473/cgroup.controllers" dev="sda1" ino=14834 res=1 22:56:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x33fe0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 808.867097] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:56:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0xa000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 809.147523] bridge1179: port 1(vlan640) entered blocking state [ 809.199639] bridge1179: port 1(vlan640) entered disabled state [ 809.280893] device vlan640 entered promiscuous mode 22:56:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2000021c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 809.544852] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:56:29 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000006000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x7, 0x1}}}}]}, 0x40}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0d268a927f1b6588b93e480b41ba3860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd60da03059bcecc7a9544fa3a07e758044ab4ea6f7ae56d88fecf9141a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f00000004c0)={{}, 0x1, &(0x7f0000000300)=[0x5], 0xff, 0x1, [0x3, 0x6e, 0x7, 0x3f]}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x1, 0xb, 0x6, 0x5, 0x80, 0x4}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f00000001c0)='GPL\x00', 0x8, 0x93, &(0x7f0000000580)=""/147, 0x41100, 0x0, '\x00', r5, 0x13, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x9, 0x351, 0x3}, 0x10}, 0x78) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="2800000bb2d6534a8c259bde43ae31542f66543d71acbec5ed92cb4d27bde5999b185f0340933d182efd217c923d2c0fa6f566611aaee9da75c143d457932b2105733b40a66140dbe45b4d0baa20c017b135d4de8c19c642f4ad0ab296807b43d323982ebe3fec1294d945cab9baf13fd16d68d545c939ba4fc7eaec3bb1d961a6a3a96a398aa9a21f407a79b296b704801bc00a0cb36aef0393264400ae88c75a2dd041b5c060a7ab1afffa1285c556b07dca6a94e732b16956d603cd35755a2f38c6019c4045e3a48606601b49465794f7fc03e2", @ANYRES16=r7, @ANYBLOB="d5dc00000000000000001500000005001e00000000000c0006000100000001000000"], 0x28}}, 0x0) 22:56:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0xc000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5865}]}}}]}, 0x3c}}, 0x0) [ 809.630417] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 809.729192] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:56:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x7ffff000, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 810.345867] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.788932] bridge1179: port 2(vlan641) entered blocking state [ 811.034286] bridge1179: port 2(vlan641) entered disabled state [ 811.165958] device vlan641 entered promiscuous mode 22:56:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x800000000000000}, 0x0) 22:56:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0xdc250400, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 22:56:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0xfffffdef, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 811.969550] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 812.058011] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 812.757759] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 812.792401] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 835.200459] watchdog: BUG: soft lockup - CPU#1 stuck for 22s! [syz-executor.5:29455] [ 835.208412] Modules linked in: [ 835.211627] irq event stamp: 1350893 [ 835.215369] hardirqs last enabled at (1350892): [] _raw_spin_unlock_irqrestore+0x79/0xe0 [ 835.225281] hardirqs last disabled at (1350893): [] trace_hardirqs_off_thunk+0x1a/0x1c [ 835.234916] softirqs last enabled at (82282): [] __do_softirq+0x678/0x980 [ 835.243492] softirqs last disabled at (82285): [] irq_exit+0x215/0x260 [ 835.252575] CPU: 1 PID: 29455 Comm: syz-executor.5 Not tainted 4.19.209-syzkaller #0 [ 835.260452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 835.269812] RIP: 0010:_raw_spin_unlock_irqrestore+0xa3/0xe0 [ 835.275520] Code: 48 c7 c0 88 82 f1 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 2f 48 83 3d ec 40 d8 01 00 74 15 48 89 df 57 9d <0f> 1f 44 00 00 eb b2 e8 6b fb e6 f8 eb c0 0f 0b 0f 0b 48 c7 c7 88 [ 835.294416] RSP: 0018:ffff8880ba107c28 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 835.302118] RAX: 1ffffffff13e3051 RBX: 0000000000000286 RCX: 1ffff11014f9998f [ 835.309384] RDX: dffffc0000000000 RSI: ffff8880a7cccc58 RDI: 0000000000000286 [ 835.316647] RBP: ffff8880ba122b40 R08: 0000000000000000 R09: 0000000000000000 [ 835.323931] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 835.331195] R13: 0000000000022b40 R14: 0000000000000000 R15: ffff8880ba122b40 [ 835.338460] FS: 00007f8a30043700(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 835.346782] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 835.352684] CR2: 00007fbfc8c49718 CR3: 0000000054c81000 CR4: 00000000003426e0 [ 835.360127] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 835.367393] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 835.374670] Call Trace: [ 835.377248] [ 835.379406] mod_timer+0x4ea/0x1010 [ 835.383066] ? round_jiffies_up_relative+0xd0/0xd0 [ 835.388004] ? prandom_u32+0x171/0x1f0 [ 835.391902] call_timer_fn+0x177/0x700 [ 835.395788] ? garp_pdu_rcv+0xc00/0xc00 [ 835.400198] ? process_timeout+0x40/0x40 [ 835.404263] ? mark_held_locks+0xa6/0xf0 [ 835.408328] ? _raw_spin_unlock_irq+0x24/0x80 [ 835.412826] ? garp_pdu_rcv+0xc00/0xc00 [ 835.416817] ? garp_pdu_rcv+0xc00/0xc00 [ 835.420790] expire_timers+0x243/0x4e0 [ 835.424703] run_timer_softirq+0x21c/0x670 [ 835.432170] ? expire_timers+0x4e0/0x4e0 [ 835.436243] ? check_preemption_disabled+0x41/0x280 [ 835.441382] __do_softirq+0x265/0x980 [ 835.445280] irq_exit+0x215/0x260 [ 835.448803] smp_apic_timer_interrupt+0x136/0x550 [ 835.453661] apic_timer_interrupt+0xf/0x20 [ 835.457910] [ 835.460162] RIP: 0010:rcu_is_watching+0x8f/0xc0 [ 835.464849] Code: b6 14 02 48 89 e8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 24 8b 43 10 d1 e8 83 e0 01 65 ff 0d 98 52 b0 7e 74 07 48 83 c4 08 5b <5d> c3 e8 6c b0 ae ff 48 83 c4 08 5b 5d c3 48 89 ef e8 fb d4 46 00 [ 835.483764] RSP: 0018:ffff88803bbe76b0 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 835.491470] RAX: 0000000000000001 RBX: ffffea00014cd740 RCX: ffffffff81518c83 [ 835.498737] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880ba122ad0 [ 835.506008] RBP: ffff8880ba122ad0 R08: 0000000000000000 R09: ffffed101742455a [ 835.513271] R10: ffff8880ba122ad3 R11: 0000000000000000 R12: 0000000000000000 [ 835.520536] R13: 0000000000000000 R14: ffffea00014cd740 R15: 00007f8a3166c000 [ 835.527850] ? rcu_is_watching+0x53/0xc0 [ 835.531924] lock_page_memcg+0x132/0x220 [ 835.535983] ? _vm_normal_page+0x132/0x510 [ 835.540221] page_remove_file_rmap+0x36/0xa30 [ 835.544819] page_remove_rmap+0xe5/0x120 [ 835.548887] unmap_page_range+0x147d/0x2c50 [ 835.553247] ? vm_normal_page_pmd+0x4c0/0x4c0 [ 835.557749] ? retint_kernel+0x2d/0x2d [ 835.561660] ? uprobe_munmap+0x2d/0x4d0 [ 835.565661] unmap_single_vma+0x198/0x300 [ 835.569818] unmap_vmas+0xa9/0x180 [ 835.573366] exit_mmap+0x2b9/0x530 [ 835.576909] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 835.582183] ? rcu_nmi_exit+0xb3/0x180 [ 835.586271] ? __khugepaged_exit+0x2a6/0x3e0 [ 835.590677] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 835.595696] ? kmem_cache_free+0x226/0x260 [ 835.599936] ? __khugepaged_exit+0x2c7/0x3e0 [ 835.604436] mmput+0x14e/0x4a0 [ 835.607633] do_exit+0xaec/0x2be0 [ 835.611106] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 835.615691] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 835.620561] ? mm_update_next_owner+0x650/0x650 [ 835.625230] ? rcu_nmi_exit+0xb3/0x180 [ 835.629121] ? retint_kernel+0x2d/0x2d [ 835.633029] do_group_exit+0x125/0x310 [ 835.636922] get_signal+0x3f2/0x1f70 [ 835.640664] do_signal+0x8f/0x1670 [ 835.644210] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 835.648902] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 835.653659] ? setup_sigcontext+0x820/0x820 [ 835.657998] ? retint_kernel+0x2d/0x2d [ 835.661910] ? __se_sys_futex+0x9b/0x3b0 [ 835.666003] ? __se_sys_futex+0x28f/0x3b0 [ 835.670160] ? __se_sys_futex+0x298/0x3b0 [ 835.674322] ? do_futex+0x1880/0x1880 [ 835.678129] ? do_syscall_64+0xb1/0x620 [ 835.682122] ? exit_to_usermode_loop+0x36/0x2a0 [ 835.686797] exit_to_usermode_loop+0x204/0x2a0 [ 835.691387] do_syscall_64+0x538/0x620 [ 835.695281] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 835.700471] RIP: 0033:0x7f8a32acc8d9 [ 835.704185] Code: Bad RIP value. [ 835.707676] RSP: 002b:00007f8a30043218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 835.715395] RAX: fffffffffffffe00 RBX: 00007f8a32bd0f68 RCX: 00007f8a32acc8d9 [ 835.722670] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8a32bd0f68 [ 835.730024] RBP: 00007f8a32bd0f60 R08: 0000000000000000 R09: 0000000000000000 [ 835.737289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a32bd0f6c [ 835.744551] R13: 00007fff8bffc6af R14: 00007f8a30043300 R15: 0000000000022000 [ 835.751878] Sending NMI from CPU 1 to CPUs 0: [ 835.756444] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0xe/0x10 [ 835.757408] Kernel panic - not syncing: softlockup: hung tasks [ 835.769985] CPU: 1 PID: 29455 Comm: syz-executor.5 Tainted: G L 4.19.209-syzkaller #0 [ 835.779366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 835.788749] Call Trace: [ 835.791362] [ 835.793543] dump_stack+0x1fc/0x2ef [ 835.797212] panic+0x26a/0x50e [ 835.800437] ? __warn_printk+0xf3/0xf3 [ 835.804366] ? cpumask_next+0x3c/0x40 [ 835.808208] ? printk_safe_flush+0xd6/0x120 [ 835.812564] ? watchdog_timer_fn.cold+0x5/0x25 [ 835.817179] ? watchdog_timer_fn+0x53e/0x580 [ 835.821640] watchdog_timer_fn.cold+0x16/0x25 [ 835.826278] __hrtimer_run_queues+0x3f6/0xe60 [ 835.830810] ? softlockup_fn+0xb0/0xb0 [ 835.834757] ? hrtimer_fixup_free+0xa0/0xa0 [ 835.839112] ? kvm_clock_get_cycles+0x14/0x30 [ 835.843640] ? ktime_get_update_offsets_now+0x2ec/0x460 [ 835.849066] hrtimer_interrupt+0x326/0x9e0 [ 835.853381] smp_apic_timer_interrupt+0x10c/0x550 [ 835.858279] apic_timer_interrupt+0xf/0x20 [ 835.862985] RIP: 0010:_raw_spin_unlock_irqrestore+0xa3/0xe0 [ 835.868974] Code: 48 c7 c0 88 82 f1 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 2f 48 83 3d ec 40 d8 01 00 74 15 48 89 df 57 9d <0f> 1f 44 00 00 eb b2 e8 6b fb e6 f8 eb c0 0f 0b 0f 0b 48 c7 c7 88 [ 835.887875] RSP: 0018:ffff8880ba107c28 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 835.895579] RAX: 1ffffffff13e3051 RBX: 0000000000000286 RCX: 1ffff11014f9998f [ 835.902844] RDX: dffffc0000000000 RSI: ffff8880a7cccc58 RDI: 0000000000000286 [ 835.910134] RBP: ffff8880ba122b40 R08: 0000000000000000 R09: 0000000000000000 [ 835.917403] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 835.924669] R13: 0000000000022b40 R14: 0000000000000000 R15: ffff8880ba122b40 [ 835.932157] ? apic_timer_interrupt+0xa/0x20 [ 835.936620] mod_timer+0x4ea/0x1010 [ 835.940286] ? round_jiffies_up_relative+0xd0/0xd0 [ 835.945238] ? prandom_u32+0x171/0x1f0 [ 835.949197] call_timer_fn+0x177/0x700 [ 835.953122] ? garp_pdu_rcv+0xc00/0xc00 [ 835.957108] ? process_timeout+0x40/0x40 [ 835.961238] ? mark_held_locks+0xa6/0xf0 [ 835.965299] ? _raw_spin_unlock_irq+0x24/0x80 [ 835.969791] ? garp_pdu_rcv+0xc00/0xc00 [ 835.973769] ? garp_pdu_rcv+0xc00/0xc00 [ 835.977745] expire_timers+0x243/0x4e0 [ 835.981813] run_timer_softirq+0x21c/0x670 [ 835.986084] ? expire_timers+0x4e0/0x4e0 [ 835.990162] ? check_preemption_disabled+0x41/0x280 [ 835.995193] __do_softirq+0x265/0x980 [ 835.999015] irq_exit+0x215/0x260 [ 836.002465] smp_apic_timer_interrupt+0x136/0x550 [ 836.007309] apic_timer_interrupt+0xf/0x20 [ 836.011623] [ 836.013854] RIP: 0010:rcu_is_watching+0x8f/0xc0 [ 836.018532] Code: b6 14 02 48 89 e8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 24 8b 43 10 d1 e8 83 e0 01 65 ff 0d 98 52 b0 7e 74 07 48 83 c4 08 5b <5d> c3 e8 6c b0 ae ff 48 83 c4 08 5b 5d c3 48 89 ef e8 fb d4 46 00 [ 836.037442] RSP: 0018:ffff88803bbe76b0 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 836.045158] RAX: 0000000000000001 RBX: ffffea00014cd740 RCX: ffffffff81518c83 [ 836.052425] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880ba122ad0 [ 836.059691] RBP: ffff8880ba122ad0 R08: 0000000000000000 R09: ffffed101742455a [ 836.066956] R10: ffff8880ba122ad3 R11: 0000000000000000 R12: 0000000000000000 [ 836.074223] R13: 0000000000000000 R14: ffffea00014cd740 R15: 00007f8a3166c000 [ 836.081512] ? rcu_is_watching+0x53/0xc0 [ 836.085598] lock_page_memcg+0x132/0x220 [ 836.089681] ? _vm_normal_page+0x132/0x510 [ 836.093944] page_remove_file_rmap+0x36/0xa30 [ 836.098453] page_remove_rmap+0xe5/0x120 [ 836.102537] unmap_page_range+0x147d/0x2c50 [ 836.106897] ? vm_normal_page_pmd+0x4c0/0x4c0 [ 836.111396] ? retint_kernel+0x2d/0x2d [ 836.115281] ? uprobe_munmap+0x2d/0x4d0 [ 836.119362] unmap_single_vma+0x198/0x300 [ 836.123518] unmap_vmas+0xa9/0x180 [ 836.127162] exit_mmap+0x2b9/0x530 [ 836.130723] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 836.135997] ? rcu_nmi_exit+0xb3/0x180 [ 836.139923] ? __khugepaged_exit+0x2a6/0x3e0 [ 836.144340] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 836.149355] ? kmem_cache_free+0x226/0x260 [ 836.153590] ? __khugepaged_exit+0x2c7/0x3e0 [ 836.158002] mmput+0x14e/0x4a0 [ 836.161196] do_exit+0xaec/0x2be0 [ 836.164656] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 836.169238] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 836.174021] ? mm_update_next_owner+0x650/0x650 [ 836.178688] ? rcu_nmi_exit+0xb3/0x180 [ 836.182586] ? retint_kernel+0x2d/0x2d [ 836.186495] do_group_exit+0x125/0x310 [ 836.190408] get_signal+0x3f2/0x1f70 [ 836.194154] do_signal+0x8f/0x1670 [ 836.197699] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 836.202282] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 836.207044] ? setup_sigcontext+0x820/0x820 [ 836.211384] ? retint_kernel+0x2d/0x2d [ 836.215297] ? __se_sys_futex+0x9b/0x3b0 [ 836.219382] ? __se_sys_futex+0x28f/0x3b0 [ 836.223534] ? __se_sys_futex+0x298/0x3b0 [ 836.228129] ? do_futex+0x1880/0x1880 [ 836.231930] ? do_syscall_64+0xb1/0x620 [ 836.235915] ? exit_to_usermode_loop+0x36/0x2a0 [ 836.240615] exit_to_usermode_loop+0x204/0x2a0 [ 836.245199] do_syscall_64+0x538/0x620 [ 836.249115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 836.254299] RIP: 0033:0x7f8a32acc8d9 [ 836.258010] Code: Bad RIP value. [ 836.261368] RSP: 002b:00007f8a30043218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 836.269157] RAX: fffffffffffffe00 RBX: 00007f8a32bd0f68 RCX: 00007f8a32acc8d9 [ 836.276424] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8a32bd0f68 [ 836.283692] RBP: 00007f8a32bd0f60 R08: 0000000000000000 R09: 0000000000000000 [ 836.290957] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a32bd0f6c [ 836.298232] R13: 00007fff8bffc6af R14: 00007f8a30043300 R15: 0000000000022000 [ 836.305636] Kernel Offset: disabled [ 836.309370] Rebooting in 86400 seconds..