0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="32040000", @ANYRES16=r3, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair(0x18, 0x3, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_NEWDST={0x84}]}, 0xa0}}, 0x0) sendfile(r5, r9, &(0x7f0000000380)=0x4, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x80, 0x40, 0x8, 0x8, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x67, 0x0, 0x1, 0x29, 0x0, @remote, @broadcast, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r10, 0x4, 0x3f, 0xe3, 0x7fff, 0x4, @private0, @loopback, 0x8000, 0x40, 0x5, 0x8001}}) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) r11 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r11, 0x0, 0x48b, &(0x7f00000003c0)={0x2, 'tunl0\x00', 0x2}, 0x18) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000440)={r11}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r5, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) openat$cgroup_ro(r7, &(0x7f0000000740)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@mpls_getnetconf={0x24, 0x52, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xa310}, @NETCONFA_IFINDEX={0x8, 0x1, r14}]}, 0x24}}, 0x0) sendfile(r12, r11, &(0x7f0000000400)=0xffffffffffffffff, 0x0) sendfile(r6, r4, 0x0, 0x10000a007) 06:29:33 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002180)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="a0002883781ecc0e", 0x8}], 0x6}}], 0x2, 0x0) 06:29:34 executing program 3: syz_emit_ethernet(0x1d6, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "39f664", 0x1a0, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, @routing={0x2b, 0xa, 0x0, 0x0, 0x0, [@loopback, @mcast1, @loopback, @loopback, @empty]}, @srh={0x0, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@private0, @empty]}, @hopopts={0x0, 0x6, '\x00', [@pad1, @hao={0xc9, 0x10, @private0}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra]}, @dstopts, @dstopts={0x0, 0x10, '\x00', [@enc_lim, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}}, @generic={0x0, 0x4f, "78c05c5f1edcbae0e820979ea4ec794cea63fe674b95e958d307638a0bada3a855e7f5e718238564838040fc2ad4207b4ede81b3dc7caf77ef798d0bddcc3559977b380816c7dac8c494e54ab12176"}, @jumbo, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @pad1]}, @fragment, @dstopts={0x0, 0x3, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}]}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "e0be0e", 0x0, "36da31"}}}}}}}, 0x0) 06:29:34 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x38}, 0x1, 0x7}, 0x0) 06:29:35 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x2c, 0x2, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}]}]}, 0x2c}}, 0x0) 06:29:35 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 06:29:35 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002180)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="a0002883781ecc0e", 0x8}], 0x6}}], 0x2, 0x0) 06:29:35 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x20000014}) socket$packet(0x11, 0x3, 0x300) shutdown(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {r3, 0x4b57, 0x64}], 0x10, 0x0, 0x0, 0x1473bf3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) [ 1357.432731][T31602] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 2, id = 0 06:29:36 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x38}, 0x1, 0x7}, 0x0) [ 1358.539453][T31610] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 06:29:37 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8200008}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="32040000", @ANYRES16=r3, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair(0x18, 0x3, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_NEWDST={0x84}]}, 0xa0}}, 0x0) sendfile(r5, r9, &(0x7f0000000380)=0x4, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x80, 0x40, 0x8, 0x8, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x67, 0x0, 0x1, 0x29, 0x0, @remote, @broadcast, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r10, 0x4, 0x3f, 0xe3, 0x7fff, 0x4, @private0, @loopback, 0x8000, 0x40, 0x5, 0x8001}}) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) r11 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r11, 0x0, 0x48b, &(0x7f00000003c0)={0x2, 'tunl0\x00', 0x2}, 0x18) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000440)={r11}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r5, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) openat$cgroup_ro(r7, &(0x7f0000000740)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@mpls_getnetconf={0x24, 0x52, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xa310}, @NETCONFA_IFINDEX={0x8, 0x1, r14}]}, 0x24}}, 0x0) sendfile(r12, r11, &(0x7f0000000400)=0xffffffffffffffff, 0x0) sendfile(r6, r4, 0x0, 0x10000a007) 06:29:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002180)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="a0002883781ecc0e", 0x8}], 0x6}}], 0x2, 0x0) 06:29:37 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8200008}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="32040000", @ANYRES16=r3, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair(0x18, 0x3, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_NEWDST={0x84}]}, 0xa0}}, 0x0) sendfile(r5, r9, &(0x7f0000000380)=0x4, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x80, 0x40, 0x8, 0x8, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x67, 0x0, 0x1, 0x29, 0x0, @remote, @broadcast, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r10, 0x4, 0x3f, 0xe3, 0x7fff, 0x4, @private0, @loopback, 0x8000, 0x40, 0x5, 0x8001}}) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) r11 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r11, 0x0, 0x48b, &(0x7f00000003c0)={0x2, 'tunl0\x00', 0x2}, 0x18) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000440)={r11}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r5, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) openat$cgroup_ro(r7, &(0x7f0000000740)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@mpls_getnetconf={0x24, 0x52, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xa310}, @NETCONFA_IFINDEX={0x8, 0x1, r14}]}, 0x24}}, 0x0) sendfile(r12, r11, &(0x7f0000000400)=0xffffffffffffffff, 0x0) sendfile(r6, r4, 0x0, 0x10000a007) 06:29:38 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 06:29:38 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x38}, 0x1, 0x7}, 0x0) 06:29:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002180)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="a0002883781ecc0e", 0x8}], 0x6}}], 0x2, 0x0) 06:29:40 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x38}, 0x1, 0x7}, 0x0) 06:29:40 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 06:29:42 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8200008}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="32040000", @ANYRES16=r3, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair(0x18, 0x3, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_NEWDST={0x84}]}, 0xa0}}, 0x0) sendfile(r5, r9, &(0x7f0000000380)=0x4, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x80, 0x40, 0x8, 0x8, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x67, 0x0, 0x1, 0x29, 0x0, @remote, @broadcast, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r10, 0x4, 0x3f, 0xe3, 0x7fff, 0x4, @private0, @loopback, 0x8000, 0x40, 0x5, 0x8001}}) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) r11 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r11, 0x0, 0x48b, &(0x7f00000003c0)={0x2, 'tunl0\x00', 0x2}, 0x18) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000440)={r11}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r5, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) openat$cgroup_ro(r7, &(0x7f0000000740)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@mpls_getnetconf={0x24, 0x52, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xa310}, @NETCONFA_IFINDEX={0x8, 0x1, r14}]}, 0x24}}, 0x0) sendfile(r12, r11, &(0x7f0000000400)=0xffffffffffffffff, 0x0) sendfile(r6, r4, 0x0, 0x10000a007) 06:29:42 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) [ 1367.020081][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.027469][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 06:29:47 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8200008}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="32040000", @ANYRES16=r3, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair(0x18, 0x3, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_NEWDST={0x84}]}, 0xa0}}, 0x0) sendfile(r5, r9, &(0x7f0000000380)=0x4, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x80, 0x40, 0x8, 0x8, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x67, 0x0, 0x1, 0x29, 0x0, @remote, @broadcast, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r10, 0x4, 0x3f, 0xe3, 0x7fff, 0x4, @private0, @loopback, 0x8000, 0x40, 0x5, 0x8001}}) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) r11 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r11, 0x0, 0x48b, &(0x7f00000003c0)={0x2, 'tunl0\x00', 0x2}, 0x18) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000440)={r11}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r5, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) openat$cgroup_ro(r7, &(0x7f0000000740)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@mpls_getnetconf={0x24, 0x52, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xa310}, @NETCONFA_IFINDEX={0x8, 0x1, r14}]}, 0x24}}, 0x0) sendfile(r12, r11, &(0x7f0000000400)=0xffffffffffffffff, 0x0) sendfile(r6, r4, 0x0, 0x10000a007) 06:29:47 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8200008}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="32040000", @ANYRES16=r3, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair(0x18, 0x3, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_NEWDST={0x84}]}, 0xa0}}, 0x0) sendfile(r5, r9, &(0x7f0000000380)=0x4, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x80, 0x40, 0x8, 0x8, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x67, 0x0, 0x1, 0x29, 0x0, @remote, @broadcast, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r10, 0x4, 0x3f, 0xe3, 0x7fff, 0x4, @private0, @loopback, 0x8000, 0x40, 0x5, 0x8001}}) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) r11 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r11, 0x0, 0x48b, &(0x7f00000003c0)={0x2, 'tunl0\x00', 0x2}, 0x18) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000440)={r11}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r5, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) openat$cgroup_ro(r7, &(0x7f0000000740)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@mpls_getnetconf={0x24, 0x52, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xa310}, @NETCONFA_IFINDEX={0x8, 0x1, r14}]}, 0x24}}, 0x0) sendfile(r12, r11, &(0x7f0000000400)=0xffffffffffffffff, 0x0) sendfile(r6, r4, 0x0, 0x10000a007) 06:29:47 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8200008}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="32040000", @ANYRES16=r3, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair(0x18, 0x3, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_NEWDST={0x84}]}, 0xa0}}, 0x0) sendfile(r5, r9, &(0x7f0000000380)=0x4, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x80, 0x40, 0x8, 0x8, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x67, 0x0, 0x1, 0x29, 0x0, @remote, @broadcast, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r10, 0x4, 0x3f, 0xe3, 0x7fff, 0x4, @private0, @loopback, 0x8000, 0x40, 0x5, 0x8001}}) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) r11 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r11, 0x0, 0x48b, &(0x7f00000003c0)={0x2, 'tunl0\x00', 0x2}, 0x18) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000440)={r11}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r5, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) openat$cgroup_ro(r7, &(0x7f0000000740)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@mpls_getnetconf={0x24, 0x52, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xa310}, @NETCONFA_IFINDEX={0x8, 0x1, r14}]}, 0x24}}, 0x0) sendfile(r12, r11, &(0x7f0000000400)=0xffffffffffffffff, 0x0) sendfile(r6, r4, 0x0, 0x10000a007) 06:29:47 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 06:29:47 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 06:29:49 executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8200008}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="32040000", @ANYRES16=r3, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair(0x18, 0x3, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_NEWDST={0x84}]}, 0xa0}}, 0x0) sendfile(r5, r9, &(0x7f0000000380)=0x4, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x80, 0x40, 0x8, 0x8, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x67, 0x0, 0x1, 0x29, 0x0, @remote, @broadcast, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r10, 0x4, 0x3f, 0xe3, 0x7fff, 0x4, @private0, @loopback, 0x8000, 0x40, 0x5, 0x8001}}) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) r11 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r11, 0x0, 0x48b, &(0x7f00000003c0)={0x2, 'tunl0\x00', 0x2}, 0x18) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000440)={r11}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r5, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) openat$cgroup_ro(r7, &(0x7f0000000740)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@mpls_getnetconf={0x24, 0x52, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xa310}, @NETCONFA_IFINDEX={0x8, 0x1, r14}]}, 0x24}}, 0x0) sendfile(r12, r11, &(0x7f0000000400)=0xffffffffffffffff, 0x0) sendfile(r6, r4, 0x0, 0x10000a007) 06:29:51 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8200008}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="32040000", @ANYRES16=r3, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair(0x18, 0x3, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_NEWDST={0x84}]}, 0xa0}}, 0x0) sendfile(r5, r9, &(0x7f0000000380)=0x4, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x80, 0x40, 0x8, 0x8, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x67, 0x0, 0x1, 0x29, 0x0, @remote, @broadcast, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r10, 0x4, 0x3f, 0xe3, 0x7fff, 0x4, @private0, @loopback, 0x8000, 0x40, 0x5, 0x8001}}) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) r11 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r11, 0x0, 0x48b, &(0x7f00000003c0)={0x2, 'tunl0\x00', 0x2}, 0x18) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000440)={r11}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r5, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) openat$cgroup_ro(r7, &(0x7f0000000740)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@mpls_getnetconf={0x24, 0x52, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xa310}, @NETCONFA_IFINDEX={0x8, 0x1, r14}]}, 0x24}}, 0x0) sendfile(r12, r11, &(0x7f0000000400)=0xffffffffffffffff, 0x0) sendfile(r6, r4, 0x0, 0x10000a007) 06:29:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="018008000300000000000ce30080080003"], 0x2c}}, 0x0) 06:29:51 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8200008}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="32040000", @ANYRES16=r3, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair(0x18, 0x3, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_NEWDST={0x84}]}, 0xa0}}, 0x0) sendfile(r5, r9, &(0x7f0000000380)=0x4, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x80, 0x40, 0x8, 0x8, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x67, 0x0, 0x1, 0x29, 0x0, @remote, @broadcast, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r10, 0x4, 0x3f, 0xe3, 0x7fff, 0x4, @private0, @loopback, 0x8000, 0x40, 0x5, 0x8001}}) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) r11 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r11, 0x0, 0x48b, &(0x7f00000003c0)={0x2, 'tunl0\x00', 0x2}, 0x18) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000440)={r11}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r5, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) openat$cgroup_ro(r7, &(0x7f0000000740)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@mpls_getnetconf={0x24, 0x52, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xa310}, @NETCONFA_IFINDEX={0x8, 0x1, r14}]}, 0x24}}, 0x0) sendfile(r12, r11, &(0x7f0000000400)=0xffffffffffffffff, 0x0) sendfile(r6, r4, 0x0, 0x10000a007) 06:29:51 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 06:29:52 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) bind$inet(r0, 0x0, 0x0) 06:29:54 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) 06:29:54 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) bind$inet(r0, 0x0, 0x0) 06:29:55 executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8200008}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="32040000", @ANYRES16=r3, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair(0x18, 0x3, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_NEWDST={0x84}]}, 0xa0}}, 0x0) sendfile(r5, r9, &(0x7f0000000380)=0x4, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x80, 0x40, 0x8, 0x8, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x67, 0x0, 0x1, 0x29, 0x0, @remote, @broadcast, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r10, 0x4, 0x3f, 0xe3, 0x7fff, 0x4, @private0, @loopback, 0x8000, 0x40, 0x5, 0x8001}}) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) r11 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r11, 0x0, 0x48b, &(0x7f00000003c0)={0x2, 'tunl0\x00', 0x2}, 0x18) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000440)={r11}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r5, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) openat$cgroup_ro(r7, &(0x7f0000000740)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@mpls_getnetconf={0x24, 0x52, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xa310}, @NETCONFA_IFINDEX={0x8, 0x1, r14}]}, 0x24}}, 0x0) sendfile(r12, r11, &(0x7f0000000400)=0xffffffffffffffff, 0x0) sendfile(r6, r4, 0x0, 0x10000a007) 06:29:55 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) bind$inet(r0, 0x0, 0x0) 06:29:56 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000), 0x10) 06:29:56 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8200008}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="32040000", @ANYRES16=r3, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair(0x18, 0x3, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_NEWDST={0x84}]}, 0xa0}}, 0x0) sendfile(r5, r9, &(0x7f0000000380)=0x4, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x80, 0x40, 0x8, 0x8, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x67, 0x0, 0x1, 0x29, 0x0, @remote, @broadcast, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r10, 0x4, 0x3f, 0xe3, 0x7fff, 0x4, @private0, @loopback, 0x8000, 0x40, 0x5, 0x8001}}) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) r11 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r11, 0x0, 0x48b, &(0x7f00000003c0)={0x2, 'tunl0\x00', 0x2}, 0x18) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000440)={r11}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r5, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) openat$cgroup_ro(r7, &(0x7f0000000740)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@mpls_getnetconf={0x24, 0x52, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xa310}, @NETCONFA_IFINDEX={0x8, 0x1, r14}]}, 0x24}}, 0x0) sendfile(r12, r11, &(0x7f0000000400)=0xffffffffffffffff, 0x0) sendfile(r6, r4, 0x0, 0x10000a007) 06:29:57 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) bind$inet(r0, 0x0, 0x0) 06:29:57 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) bind$inet(r0, 0x0, 0x0) 06:29:58 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000), 0x10) 06:29:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_delrule={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) 06:29:59 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) bind$inet(r0, 0x0, 0x0) 06:29:59 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) bind$inet(r0, 0x0, 0x0) 06:30:00 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000), 0x10) 06:30:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002c00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000c0001800807"], 0x2c}}, 0x0) 06:30:01 executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8200008}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="32040000", @ANYRES16=r3, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair(0x18, 0x3, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_NEWDST={0x84}]}, 0xa0}}, 0x0) sendfile(r5, r9, &(0x7f0000000380)=0x4, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x80, 0x40, 0x8, 0x8, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x67, 0x0, 0x1, 0x29, 0x0, @remote, @broadcast, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r10, 0x4, 0x3f, 0xe3, 0x7fff, 0x4, @private0, @loopback, 0x8000, 0x40, 0x5, 0x8001}}) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) r11 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r11, 0x0, 0x48b, &(0x7f00000003c0)={0x2, 'tunl0\x00', 0x2}, 0x18) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000440)={r11}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r5, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) openat$cgroup_ro(r7, &(0x7f0000000740)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@mpls_getnetconf={0x24, 0x52, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xa310}, @NETCONFA_IFINDEX={0x8, 0x1, r14}]}, 0x24}}, 0x0) sendfile(r12, r11, &(0x7f0000000400)=0xffffffffffffffff, 0x0) sendfile(r6, r4, 0x0, 0x10000a007) 06:30:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40086607, &(0x7f0000000000)=0x2) 06:30:02 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000), 0x10) [ 1384.535497][T31735] EXT4-fs warning (device sda1): ext4_group_extend:1843: can't shrink FS - resize aborted 06:30:03 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="54000000120019070000000000000000000000000000000000007aca34ef00000000000000000000000000000000000000000000000000002e9f0d22b04c6513e89997275d65"], 0x54}}, 0x0) 06:30:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r1, 0x1}, 0x14}}, 0x0) 06:30:04 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x5, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000400)='GPL\x00'}, 0x90) 06:30:05 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.numa_stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x2) 06:30:06 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSPGRP(r0, 0x8918, 0x0) 06:30:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}}, 0x0) 06:30:07 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x152c, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x48) 06:30:07 executing program 0: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x28407, r0}, 0x90) 06:30:08 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.numa_stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x2) [ 1389.678699][T31756] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 06:30:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f0000002900)=""/202, 0x7}) 06:30:08 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYBLOB="23b21cfd6659ce2008451e8f61a8"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x4, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 06:30:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BCAST_FLOOD={0x5, 0x21, 0x1}]}}}]}, 0x44}}, 0x0) 06:30:09 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x1d, 0x0, 0x2}, 0xc, &(0x7f0000000080)={0x0, 0x10}}, 0x0) 06:30:10 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.numa_stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x2) 06:30:10 executing program 2: getsockname$packet(0xffffffffffffffff, 0x0, 0x0) [ 1392.042450][ T28] audit: type=1804 audit(1704695410.754:944): pid=31775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir133552805/syzkaller.w1iON8/1191/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 06:30:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BCAST_FLOOD={0x5, 0x21, 0x1}]}}}]}, 0x44}}, 0x0) 06:30:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}}, 0x0) 06:30:11 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x1d, 0x0, 0x2}, 0xc, &(0x7f0000000080)={0x0, 0x10}}, 0x0) 06:30:11 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0x701}, 0x14}}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x60, &(0x7f0000000000)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lblc\x00', 0x0, 0x1fffffbf}, 0x2c) [ 1393.171665][ T28] audit: type=1804 audit(1704695410.884:945): pid=31771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir133552805/syzkaller.w1iON8/1191/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 06:30:12 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.numa_stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x2) [ 1393.748102][T31785] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 06:30:12 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e0050000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000660000000c0099000000000000000000b805b980cc010e80d10003008acb1bb4fdbea66cb3e802258a45e69fe0cf0ce6ec285ddc3fa59ef62dae30b756559b033a6f8adac21174cd2f11ac66e714377606f2b9eed6b27f3b626db83a427fa3ed7bafb3e4f20ac34903767f9442cc6ee28631b95a96f2a76aa19a8bd3784c02543b67a5a1a5c28af01497b609c0d84aab48eed432af9489b26a766cd63f7f1e0324e51e325bfb75d1fa74f2cfd09a7ad4d893d0335de269ddce30f29f4d23009d7ac38630f2a6bb0cd75c99d2e10a5e13d3d3"], 0x5e0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 06:30:13 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) [ 1395.722744][ T28] audit: type=1804 audit(1704695414.484:946): pid=31793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1503793391/syzkaller.PvjYis/1718/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 06:30:14 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x280, 0x0, 0x700001b, 0x148, 0x128, 0x148, 0x1e8, 0x240, 0x240, 0x1e8, 0x20d, 0x7fffffe, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'tunl0\x00', 'sit0\x00', {}, {}, 0xc01}, 0x1ea, 0xc0, 0x128, 0x0, {0x390}, [@common=@inet=@socket1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'veth0_to_bond\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 1395.854707][ T28] audit: type=1804 audit(1704695414.494:947): pid=31793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1503793391/syzkaller.PvjYis/1718/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 06:30:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x7, 0xb, 0x5, [@dev, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}], 0x20}, 0x0) 06:30:14 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x1d, 0x0, 0x2}, 0xc, &(0x7f0000000080)={0x0, 0x10}}, 0x0) 06:30:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BCAST_FLOOD={0x5, 0x21, 0x1}]}}}]}, 0x44}}, 0x0) 06:30:15 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) [ 1396.425398][T31799] No such timeout policy "syz0" 06:30:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}}, 0x0) 06:30:16 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd19ae7c2f4393c16a007"]}]}, 0x114}], 0x1}, 0x0) [ 1397.881736][T31808] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 06:30:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4f8, 0x0, 0xa, 0x148, 0x328, 0x10, 0x460, 0x2a8, 0x2a8, 0x460, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback=0x7f003b00, @dev, 0x0, 0x0, 'team_slave_1\x00', 'nr0\x00'}, 0x0, 0x2f8, 0x328, 0x0, {0x20000000, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x26, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@set={{0x40}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x558) 06:30:17 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9005}, 0x4) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x20}, 0x33fe0}}, 0x0) 06:30:17 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) [ 1398.849226][T31817] xt_hashlimit: overflow, rate too high: 0 06:30:17 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 06:30:18 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 06:30:18 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9005}, 0x4) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x20}, 0x33fe0}}, 0x0) 06:30:18 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x1d, 0x0, 0x2}, 0xc, &(0x7f0000000080)={0x0, 0x10}}, 0x0) 06:30:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BCAST_FLOOD={0x5, 0x21, 0x1}]}}}]}, 0x44}}, 0x0) 06:30:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}}, 0x0) 06:30:19 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 06:30:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) 06:30:20 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9005}, 0x4) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x20}, 0x33fe0}}, 0x0) 06:30:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r1, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000040)={0x1d, r5}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) [ 1402.139113][T31839] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 06:30:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001400)=@newlink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:21 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 06:30:22 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = socket(0x2, 0x4, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000180)={0x3, @bcast, 0xee01}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4000000}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000ce15000000f03b00000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010063616b65000000000400020008000e0001000000"], 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9be}]]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x52}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x49}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x30}, @NL80211_ATTR_PMKID={0x14, 0x55, "c7de8aac5e27bea9fa7c20189fba43ce"}, @NL80211_ATTR_PMKID={0x14, 0x55, "ef69d1dd56a2a8023744a29f168005e3"}, @NL80211_ATTR_PMKID={0x14, 0x55, "92252bca4897ae3cdb5f9606e0d5e65e"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x4) connect$ax25(r2, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x3c}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private1}}, &(0x7f0000000500)=0xe8) r12 = socket(0x2, 0x2, 0x0) r13 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@ipv6_getroute={0x6c, 0x1a, 0xa00, 0x70bd2a, 0x25dfdbfe, {0xa, 0x14, 0x14, 0x4, 0xfe, 0x2, 0xc8, 0xa}, [@RTA_PREF={0x5}, @RTA_UID={0x8, 0x19, r11}, @RTA_OIF={0x8, 0x4, r14}, @RTA_PRIORITY={0x8, 0x6, 0xe6d}, @RTA_PREF={0x5, 0x14, 0x5}, @RTA_PRIORITY={0x8, 0x6, 0xf07}, @RTA_IIF={0x8, 0x3, r3}, @RTA_MULTIPATH={0xc, 0x9, {0xa4, 0x10, 0x0, r15}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6, 0x6, 0x40}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40810}, 0x5) ioctl$SIOCAX25DELUID(r1, 0x89e1, &(0x7f0000000040)={0x3, @bcast, 0xee00}) 06:30:22 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9005}, 0x4) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x20}, 0x33fe0}}, 0x0) 06:30:23 executing program 1: socketpair(0x29, 0x2, 0x928, &(0x7f0000000800)) [ 1402.836670][T31839] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1404.380209][T31852] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:30:23 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 06:30:25 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x9a03, &(0x7f0000001340)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef402000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 06:30:25 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r1, 0x8fbe7d3613fe788f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 06:30:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r1, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000040)={0x1d, r5}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 06:30:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x81}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x0, 0x101}, 0x8) [ 1408.245624][T31874] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 06:30:27 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x20600) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8914, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) [ 1408.587682][T31874] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 06:30:27 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @rand_addr=0x64010100}, {0x2, 0x0, @local}, 0x454}) 06:30:27 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = socket(0x2, 0x4, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000180)={0x3, @bcast, 0xee01}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4000000}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000ce15000000f03b00000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010063616b65000000000400020008000e0001000000"], 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9be}]]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x52}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x49}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x30}, @NL80211_ATTR_PMKID={0x14, 0x55, "c7de8aac5e27bea9fa7c20189fba43ce"}, @NL80211_ATTR_PMKID={0x14, 0x55, "ef69d1dd56a2a8023744a29f168005e3"}, @NL80211_ATTR_PMKID={0x14, 0x55, "92252bca4897ae3cdb5f9606e0d5e65e"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x4) connect$ax25(r2, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x3c}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private1}}, &(0x7f0000000500)=0xe8) r12 = socket(0x2, 0x2, 0x0) r13 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@ipv6_getroute={0x6c, 0x1a, 0xa00, 0x70bd2a, 0x25dfdbfe, {0xa, 0x14, 0x14, 0x4, 0xfe, 0x2, 0xc8, 0xa}, [@RTA_PREF={0x5}, @RTA_UID={0x8, 0x19, r11}, @RTA_OIF={0x8, 0x4, r14}, @RTA_PRIORITY={0x8, 0x6, 0xe6d}, @RTA_PREF={0x5, 0x14, 0x5}, @RTA_PRIORITY={0x8, 0x6, 0xf07}, @RTA_IIF={0x8, 0x3, r3}, @RTA_MULTIPATH={0xc, 0x9, {0xa4, 0x10, 0x0, r15}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6, 0x6, 0x40}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40810}, 0x5) ioctl$SIOCAX25DELUID(r1, 0x89e1, &(0x7f0000000040)={0x3, @bcast, 0xee00}) 06:30:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="0201130010061f00cb2f4359b648d5ed0000002f0000ac141417ef06e63a808a5e5cbd0f72e410820c520f0604e4fdfe4b88af305af7b96b4c119510da9fe3c06376c33076a167d50261a67ad29b308cde521aa0c385c73fed0c3ac7ec19866e16bdbd"], 0x3000}], 0x1}, 0x0) sendfile(r3, r2, 0x0, 0x80000001) 06:30:28 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x81}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x0, 0x101}, 0x8) [ 1410.635958][ T28] audit: type=1804 audit(1704695429.424:948): pid=31896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir102709967/syzkaller.A4hqKL/1690/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 1411.977536][T31882] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:30:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x81}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x0, 0x101}, 0x8) 06:30:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="0201130010061f00cb2f4359b648d5ed0000002f0000ac141417ef06e63a808a5e5cbd0f72e410820c520f0604e4fdfe4b88af305af7b96b4c119510da9fe3c06376c33076a167d50261a67ad29b308cde521aa0c385c73fed0c3ac7ec19866e16bdbd"], 0x3000}], 0x1}, 0x0) sendfile(r3, r2, 0x0, 0x80000001) 06:30:31 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="0201130010061f00cb2f4359b648d5ed0000002f0000ac141417ef06e63a808a5e5cbd0f72e410820c520f0604e4fdfe4b88af305af7b96b4c119510da9fe3c06376c33076a167d50261a67ad29b308cde521aa0c385c73fed0c3ac7ec19866e16bdbd"], 0x3000}], 0x1}, 0x0) sendfile(r3, r2, 0x0, 0x80000001) 06:30:31 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x81}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x0, 0x101}, 0x8) 06:30:31 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = socket(0x2, 0x4, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000180)={0x3, @bcast, 0xee01}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4000000}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000ce15000000f03b00000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010063616b65000000000400020008000e0001000000"], 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9be}]]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x52}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x49}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x30}, @NL80211_ATTR_PMKID={0x14, 0x55, "c7de8aac5e27bea9fa7c20189fba43ce"}, @NL80211_ATTR_PMKID={0x14, 0x55, "ef69d1dd56a2a8023744a29f168005e3"}, @NL80211_ATTR_PMKID={0x14, 0x55, "92252bca4897ae3cdb5f9606e0d5e65e"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x4) connect$ax25(r2, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x3c}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private1}}, &(0x7f0000000500)=0xe8) r12 = socket(0x2, 0x2, 0x0) r13 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@ipv6_getroute={0x6c, 0x1a, 0xa00, 0x70bd2a, 0x25dfdbfe, {0xa, 0x14, 0x14, 0x4, 0xfe, 0x2, 0xc8, 0xa}, [@RTA_PREF={0x5}, @RTA_UID={0x8, 0x19, r11}, @RTA_OIF={0x8, 0x4, r14}, @RTA_PRIORITY={0x8, 0x6, 0xe6d}, @RTA_PREF={0x5, 0x14, 0x5}, @RTA_PRIORITY={0x8, 0x6, 0xf07}, @RTA_IIF={0x8, 0x3, r3}, @RTA_MULTIPATH={0xc, 0x9, {0xa4, 0x10, 0x0, r15}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6, 0x6, 0x40}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40810}, 0x5) ioctl$SIOCAX25DELUID(r1, 0x89e1, &(0x7f0000000040)={0x3, @bcast, 0xee00}) 06:30:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r1, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000040)={0x1d, r5}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) [ 1414.091895][ T28] audit: type=1804 audit(1704695432.864:949): pid=31906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir102709967/syzkaller.A4hqKL/1691/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1414.759775][ T28] audit: type=1804 audit(1704695433.544:950): pid=31924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1257489627/syzkaller.DQKjpI/859/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 06:30:33 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="0201130010061f00cb2f4359b648d5ed0000002f0000ac141417ef06e63a808a5e5cbd0f72e410820c520f0604e4fdfe4b88af305af7b96b4c119510da9fe3c06376c33076a167d50261a67ad29b308cde521aa0c385c73fed0c3ac7ec19866e16bdbd"], 0x3000}], 0x1}, 0x0) sendfile(r3, r2, 0x0, 0x80000001) [ 1415.742039][T31915] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:30:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x81}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x0, 0x101}, 0x8) 06:30:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x81}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x0, 0x101}, 0x8) 06:30:35 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="0201130010061f00cb2f4359b648d5ed0000002f0000ac141417ef06e63a808a5e5cbd0f72e410820c520f0604e4fdfe4b88af305af7b96b4c119510da9fe3c06376c33076a167d50261a67ad29b308cde521aa0c385c73fed0c3ac7ec19866e16bdbd"], 0x3000}], 0x1}, 0x0) sendfile(r3, r2, 0x0, 0x80000001) [ 1416.556842][ T28] audit: type=1804 audit(1704695435.334:951): pid=31930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir102709967/syzkaller.A4hqKL/1692/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 06:30:35 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = socket(0x2, 0x4, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000180)={0x3, @bcast, 0xee01}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4000000}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000ce15000000f03b00000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010063616b65000000000400020008000e0001000000"], 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9be}]]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x52}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x49}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x30}, @NL80211_ATTR_PMKID={0x14, 0x55, "c7de8aac5e27bea9fa7c20189fba43ce"}, @NL80211_ATTR_PMKID={0x14, 0x55, "ef69d1dd56a2a8023744a29f168005e3"}, @NL80211_ATTR_PMKID={0x14, 0x55, "92252bca4897ae3cdb5f9606e0d5e65e"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x4) connect$ax25(r2, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x3c}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private1}}, &(0x7f0000000500)=0xe8) r12 = socket(0x2, 0x2, 0x0) r13 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@ipv6_getroute={0x6c, 0x1a, 0xa00, 0x70bd2a, 0x25dfdbfe, {0xa, 0x14, 0x14, 0x4, 0xfe, 0x2, 0xc8, 0xa}, [@RTA_PREF={0x5}, @RTA_UID={0x8, 0x19, r11}, @RTA_OIF={0x8, 0x4, r14}, @RTA_PRIORITY={0x8, 0x6, 0xe6d}, @RTA_PREF={0x5, 0x14, 0x5}, @RTA_PRIORITY={0x8, 0x6, 0xf07}, @RTA_IIF={0x8, 0x3, r3}, @RTA_MULTIPATH={0xc, 0x9, {0xa4, 0x10, 0x0, r15}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6, 0x6, 0x40}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40810}, 0x5) ioctl$SIOCAX25DELUID(r1, 0x89e1, &(0x7f0000000040)={0x3, @bcast, 0xee00}) 06:30:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r1, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000040)={0x1d, r5}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 06:30:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="0201130010061f00cb2f4359b648d5ed0000002f0000ac141417ef06e63a808a5e5cbd0f72e410820c520f0604e4fdfe4b88af305af7b96b4c119510da9fe3c06376c33076a167d50261a67ad29b308cde521aa0c385c73fed0c3ac7ec19866e16bdbd"], 0x3000}], 0x1}, 0x0) sendfile(r3, r2, 0x0, 0x80000001) 06:30:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x81}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x0, 0x101}, 0x8) [ 1418.963859][ T28] audit: type=1804 audit(1704695437.724:952): pid=31944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1257489627/syzkaller.DQKjpI/860/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 1419.712829][ T28] audit: type=1804 audit(1704695438.464:953): pid=31957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir102709967/syzkaller.A4hqKL/1693/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 1420.004976][T31950] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:30:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="0201130010061f00cb2f4359b648d5ed0000002f0000ac141417ef06e63a808a5e5cbd0f72e410820c520f0604e4fdfe4b88af305af7b96b4c119510da9fe3c06376c33076a167d50261a67ad29b308cde521aa0c385c73fed0c3ac7ec19866e16bdbd"], 0x3000}], 0x1}, 0x0) sendfile(r3, r2, 0x0, 0x80000001) 06:30:41 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x81}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x0, 0x101}, 0x8) 06:30:42 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x81}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x0, 0x101}, 0x8) 06:30:42 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xb, &(0x7f0000000700)=@framed={{0x18, 0x8}, [@initr0, @generic={0x9f}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x7000}}, &(0x7f0000000000)='GPL\x00'}, 0x90) 06:30:42 executing program 2: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) [ 1424.042049][ T28] audit: type=1804 audit(1704695442.764:954): pid=31969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1257489627/syzkaller.DQKjpI/861/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 06:30:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x46}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "70fd5f", 0x4c, 0x3a, 0x0, @private2, @mcast2, {[@hopopts], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x88be, 0x0, {{}, 0xffffa888}}, {0x8, 0x22eb, 0x4000000, {{0x0, 0x4}, 0x2b}}}}}}}, 0x82) 06:30:43 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x81}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x0, 0x101}, 0x8) 06:30:43 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) 06:30:43 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x81}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x0, 0x101}, 0x8) 06:30:44 executing program 2: r0 = socket(0x18, 0x0, 0x2) connect$packet(r0, 0x0, 0x0) 06:30:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000900), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0xc6c941136d8ff193, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev}]}, 0x24}}, 0x0) 06:30:45 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x81}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x0, 0x101}, 0x8) 06:30:45 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 06:30:45 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) 06:30:45 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000009680)=[{{0x0, 0x0, &(0x7f0000005440)=[{0x0}, {&(0x7f00000051c0)=""/89, 0x59}], 0x2}}], 0x1, 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) 06:30:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x81}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x0, 0x101}, 0x8) [ 1428.474631][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.485726][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 06:30:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000900), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0xc6c941136d8ff193, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev}]}, 0x24}}, 0x0) 06:30:47 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) 06:30:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000900), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0xc6c941136d8ff193, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev}]}, 0x24}}, 0x0) 06:30:48 executing program 1: syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) 06:30:49 executing program 1: syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) 06:30:49 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 06:30:49 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) 06:30:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000900), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0xc6c941136d8ff193, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev}]}, 0x24}}, 0x0) 06:30:50 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x700, 0x700, 0xffff, 0x7, {{0xa, 0x4, 0x0, 0x5, 0x28, 0x68, 0x0, 0x5, 0x29, 0x0, @local, @loopback, {[@generic={0x82, 0x11, "32c75459120bddf9d5611c7feb2984"}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000a40)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0}}]}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ac0)={'ip6tnl0\x00', &(0x7f0000000a40)={'syztnl0\x00', r2, 0x29, 0x0, 0x80, 0x3, 0x26, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x7, 0xcbd}}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0xd4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40010}, 0x20040080) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x9, 0x5, 0x12, @private1, @mcast1, 0x40, 0x80, 0x9c8, 0xe0000}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000c80)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0008000800000cda00000e31472e001c00662300ff29907800000f00000200000000000000800000757eee1a3172a288888a2f99ef3b269b284be1292335623a49508b275252b16cb3a8b61f224dc66511719797be57492b84c4fa14f997b1760e2d1e9dfbf9898cbd2a5e8cf78109087268f247f871a8edee8823ecb4b05e1664b1583c4988d1"]}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x60, r1, 0x20, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x48080}, 0xc000) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x14, 0x16, 0x8729c3fb0a1d5f90, 0x70bd2c, 0x0, {0x8}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r13, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)={0x50, r12, 0x300, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "98a2798fa8884b4b04933d4827"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r9, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, r12, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x5, 0xd}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfff}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5f}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0xfffffffc, 0xdd, 0x4, 0x200, 0x7f, 0x0, 0x5]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x40080) sendmsg$NL80211_CMD_ABORT_SCAN(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, r12, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) 06:30:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000900), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0xc6c941136d8ff193, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev}]}, 0x24}}, 0x0) 06:30:51 executing program 1: syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) 06:30:52 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002180)="a80989cef3c85f0c13dc0ca56cd9bfbc55053f59a971fdaad871364e39f28420348988a1d5929a8de528c3e67bd7458e49e3217e42d230d1a6e49448c8558916", 0x7ffff000}, {&(0x7f0000001d00)='M', 0x1}], 0x2}, 0x8100000}], 0x1, 0x0) 06:30:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000900), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0xc6c941136d8ff193, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev}]}, 0x24}}, 0x0) 06:30:54 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000900), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0xc6c941136d8ff193, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev}]}, 0x24}}, 0x0) 06:30:54 executing program 1: syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) 06:30:54 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002180)="a80989cef3c85f0c13dc0ca56cd9bfbc55053f59a971fdaad871364e39f28420348988a1d5929a8de528c3e67bd7458e49e3217e42d230d1a6e49448c8558916", 0x7ffff000}, {&(0x7f0000001d00)='M', 0x1}], 0x2}, 0x8100000}], 0x1, 0x0) 06:30:56 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 06:30:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x135cfb4307d517, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc}]}], {0x14}}, 0x60}}, 0x0) 06:30:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x248800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x4}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x1, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0xa}, 0x48) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0), 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r8, &(0x7f0000000000), 0x248800) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x9, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000005dc7ffff000000005700000018220000", @ANYRES32=r0, @ANYBLOB="00a2b48cf61b044103000000ff7f000018510000000000000000000000000000181b0000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x3, 0xb1, &(0x7f0000000300)=""/177, 0x0, 0x2, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xc, 0x11, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r2, r3, 0x1, r4, r5, r6, 0xffffffffffffffff, r7, r8, 0xffffffffffffffff]}, 0x80) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r8}, 0x8) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_remove_blocks\x00', r10}, 0x10) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'lo\x00', 0x100}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r11, &(0x7f00000001c0)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 06:30:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 06:30:59 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002180)="a80989cef3c85f0c13dc0ca56cd9bfbc55053f59a971fdaad871364e39f28420348988a1d5929a8de528c3e67bd7458e49e3217e42d230d1a6e49448c8558916", 0x7ffff000}, {&(0x7f0000001d00)='M', 0x1}], 0x2}, 0x8100000}], 0x1, 0x0) 06:31:01 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 06:31:01 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x541b, &(0x7f00000000c0)={0x3, @null}) 06:31:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x248800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x4}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x1, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0xa}, 0x48) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0), 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r8, &(0x7f0000000000), 0x248800) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x9, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000005dc7ffff000000005700000018220000", @ANYRES32=r0, @ANYBLOB="00a2b48cf61b044103000000ff7f000018510000000000000000000000000000181b0000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x3, 0xb1, &(0x7f0000000300)=""/177, 0x0, 0x2, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xc, 0x11, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r2, r3, 0x1, r4, r5, r6, 0xffffffffffffffff, r7, r8, 0xffffffffffffffff]}, 0x80) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r8}, 0x8) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_remove_blocks\x00', r10}, 0x10) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'lo\x00', 0x100}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r11, &(0x7f00000001c0)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 06:31:03 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002180)="a80989cef3c85f0c13dc0ca56cd9bfbc55053f59a971fdaad871364e39f28420348988a1d5929a8de528c3e67bd7458e49e3217e42d230d1a6e49448c8558916", 0x7ffff000}, {&(0x7f0000001d00)='M', 0x1}], 0x2}, 0x8100000}], 0x1, 0x0) 06:31:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x248800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x4}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x1, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0xa}, 0x48) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0), 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r8, &(0x7f0000000000), 0x248800) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x9, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000005dc7ffff000000005700000018220000", @ANYRES32=r0, @ANYBLOB="00a2b48cf61b044103000000ff7f000018510000000000000000000000000000181b0000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x3, 0xb1, &(0x7f0000000300)=""/177, 0x0, 0x2, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xc, 0x11, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r2, r3, 0x1, r4, r5, r6, 0xffffffffffffffff, r7, r8, 0xffffffffffffffff]}, 0x80) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r8}, 0x8) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_remove_blocks\x00', r10}, 0x10) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'lo\x00', 0x100}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r11, &(0x7f00000001c0)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 06:31:03 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580)="c06b08063174fa3b2f91d59aa292514994929f562c3667e6e6707276b5c89f8dd88b2b1071e4cbba6c710bb4a32314826e99d19fbf5c3408ca476786bfdaa4bd727b9b60e7102286f35abaa192fcef413a4f9e06465cac574efc3573c65aab7d963c44afed6f5e9170aa0088f5afba91553acedb26e83b1f52ed9037223ebccf9e48cabb63b2b47571ee5abd87ac9c139ff83730680c8b66ac7b3649db64d19b49a002fcb8c704d1184b1783800c7e6bb5e5048f531453ba921dc7e639e697220cf08cd84571d8a323398596b4923f10cdb9204ec3839bdeebcd1387246e2a3a6a15", 0xe2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={0x0, 0x0, 0x4010}, 0x18) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={0x200, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x1d5, 0x33, @reassoc_req={@wo_ht={{}, {}, @broadcast, @device_a, @random="843932a1fd12"}, 0x0, 0x0, @broadcast, {}, @val={0x1, 0x1, [{}]}, @void, [{0xdd, 0x8, "83af68440887e60d"}, {0xdd, 0x5c, "9c2f8570f0b50a31aa5bde33ef4075cc62e74abec76522b557199b61dd36879e943e3cf99f3cacdf89af80fad7b0f5922894d1694baa018d4f414afc06150230aee253becbb840adcc95ff7dfd9f8cdd2e2ebd78b6abaf7e2760c0d6"}, {0xdd, 0x4e, "ebd4d3578d0b89bdc2585b7957ead33350967a9993b45406abd1b0aee923deff5b8f03f0b929849654dc8d5f00c0df15d922d0178501ee7525a25d6bba80b74fb782b7fbfe1a5e66ffe9204fc68d"}, {0xdd, 0x6, "955b1dd700b3"}, {0xdd, 0xe0, "672f8ff0553b7627474bc38d0de9b39bd5c3dc6514d5ae52f30a6fcba93e3f07691013e224a27a63c5e9f70ffbcf38d8eb6f6b4e360d121b30819659ade98406139420a413586a75dda54072c0a081dfd0e073235b31b95641e410a8ff014228f007c76fce737c28b5c8cf453b9e07905bab667a52083e8378984c6d868ec20065af2855d0746c7b6fa5ce66a908eb4a5904c01e3687c3cd9a8909d66c0dee891f24306a476031b73c6234c7b2019457f0eced1fd4b19be531959288afe2b836df3a83c53c2f22f242f651f24200a39dfd8272df2c055fd4f79f86d83855dcd8"}, {0xdd, 0x6, "2bac99018fbd"}]}}]}, 0x200}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 1446.928220][ T28] audit: type=1804 audit(1704695465.714:955): pid=32091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3930108561/syzkaller.BqTn8d/1663/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 1447.584500][ T28] audit: type=1804 audit(1704695465.754:956): pid=32091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3930108561/syzkaller.BqTn8d/1663/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 1448.911881][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! 06:31:07 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580)="c06b08063174fa3b2f91d59aa292514994929f562c3667e6e6707276b5c89f8dd88b2b1071e4cbba6c710bb4a32314826e99d19fbf5c3408ca476786bfdaa4bd727b9b60e7102286f35abaa192fcef413a4f9e06465cac574efc3573c65aab7d963c44afed6f5e9170aa0088f5afba91553acedb26e83b1f52ed9037223ebccf9e48cabb63b2b47571ee5abd87ac9c139ff83730680c8b66ac7b3649db64d19b49a002fcb8c704d1184b1783800c7e6bb5e5048f531453ba921dc7e639e697220cf08cd84571d8a323398596b4923f10cdb9204ec3839bdeebcd1387246e2a3a6a15", 0xe2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={0x0, 0x0, 0x4010}, 0x18) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={0x200, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x1d5, 0x33, @reassoc_req={@wo_ht={{}, {}, @broadcast, @device_a, @random="843932a1fd12"}, 0x0, 0x0, @broadcast, {}, @val={0x1, 0x1, [{}]}, @void, [{0xdd, 0x8, "83af68440887e60d"}, {0xdd, 0x5c, "9c2f8570f0b50a31aa5bde33ef4075cc62e74abec76522b557199b61dd36879e943e3cf99f3cacdf89af80fad7b0f5922894d1694baa018d4f414afc06150230aee253becbb840adcc95ff7dfd9f8cdd2e2ebd78b6abaf7e2760c0d6"}, {0xdd, 0x4e, "ebd4d3578d0b89bdc2585b7957ead33350967a9993b45406abd1b0aee923deff5b8f03f0b929849654dc8d5f00c0df15d922d0178501ee7525a25d6bba80b74fb782b7fbfe1a5e66ffe9204fc68d"}, {0xdd, 0x6, "955b1dd700b3"}, {0xdd, 0xe0, "672f8ff0553b7627474bc38d0de9b39bd5c3dc6514d5ae52f30a6fcba93e3f07691013e224a27a63c5e9f70ffbcf38d8eb6f6b4e360d121b30819659ade98406139420a413586a75dda54072c0a081dfd0e073235b31b95641e410a8ff014228f007c76fce737c28b5c8cf453b9e07905bab667a52083e8378984c6d868ec20065af2855d0746c7b6fa5ce66a908eb4a5904c01e3687c3cd9a8909d66c0dee891f24306a476031b73c6234c7b2019457f0eced1fd4b19be531959288afe2b836df3a83c53c2f22f242f651f24200a39dfd8272df2c055fd4f79f86d83855dcd8"}, {0xdd, 0x6, "2bac99018fbd"}]}}]}, 0x200}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 06:31:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)={0x1c, r1, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010d0000000000f0ff000700400008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f74192c6d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x58}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) 06:31:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x248800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x4}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x1, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0xa}, 0x48) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0), 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r8, &(0x7f0000000000), 0x248800) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x9, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000005dc7ffff000000005700000018220000", @ANYRES32=r0, @ANYBLOB="00a2b48cf61b044103000000ff7f000018510000000000000000000000000000181b0000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x3, 0xb1, &(0x7f0000000300)=""/177, 0x0, 0x2, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xc, 0x11, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r2, r3, 0x1, r4, r5, r6, 0xffffffffffffffff, r7, r8, 0xffffffffffffffff]}, 0x80) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r8}, 0x8) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_remove_blocks\x00', r10}, 0x10) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'lo\x00', 0x100}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r11, &(0x7f00000001c0)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 06:31:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x248800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x4}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x1, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0xa}, 0x48) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0), 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r8, &(0x7f0000000000), 0x248800) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x9, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000005dc7ffff000000005700000018220000", @ANYRES32=r0, @ANYBLOB="00a2b48cf61b044103000000ff7f000018510000000000000000000000000000181b0000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x3, 0xb1, &(0x7f0000000300)=""/177, 0x0, 0x2, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xc, 0x11, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r2, r3, 0x1, r4, r5, r6, 0xffffffffffffffff, r7, r8, 0xffffffffffffffff]}, 0x80) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r8}, 0x8) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_remove_blocks\x00', r10}, 0x10) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'lo\x00', 0x100}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r11, &(0x7f00000001c0)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 06:31:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0x1a, 0x0, 0x0, 0x0, 0x26, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) [ 1451.881957][ T28] audit: type=1804 audit(1704695470.644:957): pid=32103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3930108561/syzkaller.BqTn8d/1664/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 06:31:10 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x112, 0x4, 0x0, 0x0) 06:31:11 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1}, 0x48) [ 1453.392286][ T28] audit: type=1804 audit(1704695471.044:958): pid=32103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3930108561/syzkaller.BqTn8d/1664/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 06:31:12 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580)="c06b08063174fa3b2f91d59aa292514994929f562c3667e6e6707276b5c89f8dd88b2b1071e4cbba6c710bb4a32314826e99d19fbf5c3408ca476786bfdaa4bd727b9b60e7102286f35abaa192fcef413a4f9e06465cac574efc3573c65aab7d963c44afed6f5e9170aa0088f5afba91553acedb26e83b1f52ed9037223ebccf9e48cabb63b2b47571ee5abd87ac9c139ff83730680c8b66ac7b3649db64d19b49a002fcb8c704d1184b1783800c7e6bb5e5048f531453ba921dc7e639e697220cf08cd84571d8a323398596b4923f10cdb9204ec3839bdeebcd1387246e2a3a6a15", 0xe2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={0x0, 0x0, 0x4010}, 0x18) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={0x200, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x1d5, 0x33, @reassoc_req={@wo_ht={{}, {}, @broadcast, @device_a, @random="843932a1fd12"}, 0x0, 0x0, @broadcast, {}, @val={0x1, 0x1, [{}]}, @void, [{0xdd, 0x8, "83af68440887e60d"}, {0xdd, 0x5c, "9c2f8570f0b50a31aa5bde33ef4075cc62e74abec76522b557199b61dd36879e943e3cf99f3cacdf89af80fad7b0f5922894d1694baa018d4f414afc06150230aee253becbb840adcc95ff7dfd9f8cdd2e2ebd78b6abaf7e2760c0d6"}, {0xdd, 0x4e, "ebd4d3578d0b89bdc2585b7957ead33350967a9993b45406abd1b0aee923deff5b8f03f0b929849654dc8d5f00c0df15d922d0178501ee7525a25d6bba80b74fb782b7fbfe1a5e66ffe9204fc68d"}, {0xdd, 0x6, "955b1dd700b3"}, {0xdd, 0xe0, "672f8ff0553b7627474bc38d0de9b39bd5c3dc6514d5ae52f30a6fcba93e3f07691013e224a27a63c5e9f70ffbcf38d8eb6f6b4e360d121b30819659ade98406139420a413586a75dda54072c0a081dfd0e073235b31b95641e410a8ff014228f007c76fce737c28b5c8cf453b9e07905bab667a52083e8378984c6d868ec20065af2855d0746c7b6fa5ce66a908eb4a5904c01e3687c3cd9a8909d66c0dee891f24306a476031b73c6234c7b2019457f0eced1fd4b19be531959288afe2b836df3a83c53c2f22f242f651f24200a39dfd8272df2c055fd4f79f86d83855dcd8"}, {0xdd, 0x6, "2bac99018fbd"}]}}]}, 0x200}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 06:31:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x112, 0x4, 0x0, 0x0) 06:31:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)={0x1c, r1, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010d0000000000f0ff000700400008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f74192c6d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x58}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) 06:31:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x248800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x4}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x1, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0xa}, 0x48) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0), 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r8, &(0x7f0000000000), 0x248800) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x9, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000005dc7ffff000000005700000018220000", @ANYRES32=r0, @ANYBLOB="00a2b48cf61b044103000000ff7f000018510000000000000000000000000000181b0000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x3, 0xb1, &(0x7f0000000300)=""/177, 0x0, 0x2, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xc, 0x11, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r2, r3, 0x1, r4, r5, r6, 0xffffffffffffffff, r7, r8, 0xffffffffffffffff]}, 0x80) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r8}, 0x8) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_remove_blocks\x00', r10}, 0x10) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'lo\x00', 0x100}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r11, &(0x7f00000001c0)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 06:31:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x248800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x4}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x1, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0xa}, 0x48) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0), 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r8, &(0x7f0000000000), 0x248800) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x9, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000005dc7ffff000000005700000018220000", @ANYRES32=r0, @ANYBLOB="00a2b48cf61b044103000000ff7f000018510000000000000000000000000000181b0000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x3, 0xb1, &(0x7f0000000300)=""/177, 0x0, 0x2, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xc, 0x11, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r2, r3, 0x1, r4, r5, r6, 0xffffffffffffffff, r7, r8, 0xffffffffffffffff]}, 0x80) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r8}, 0x8) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_remove_blocks\x00', r10}, 0x10) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'lo\x00', 0x100}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r11, &(0x7f00000001c0)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 06:31:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f00000006c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}}, 0x0) 06:31:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x112, 0x4, 0x0, 0x0) [ 1456.635740][ T28] audit: type=1804 audit(1704695475.424:959): pid=32127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3930108561/syzkaller.BqTn8d/1665/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 1456.801728][T32125] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 1457.539529][T32125] netlink: 'syz-executor.0': attribute type 11 has an invalid length. 06:31:16 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580)="c06b08063174fa3b2f91d59aa292514994929f562c3667e6e6707276b5c89f8dd88b2b1071e4cbba6c710bb4a32314826e99d19fbf5c3408ca476786bfdaa4bd727b9b60e7102286f35abaa192fcef413a4f9e06465cac574efc3573c65aab7d963c44afed6f5e9170aa0088f5afba91553acedb26e83b1f52ed9037223ebccf9e48cabb63b2b47571ee5abd87ac9c139ff83730680c8b66ac7b3649db64d19b49a002fcb8c704d1184b1783800c7e6bb5e5048f531453ba921dc7e639e697220cf08cd84571d8a323398596b4923f10cdb9204ec3839bdeebcd1387246e2a3a6a15", 0xe2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={0x0, 0x0, 0x4010}, 0x18) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={0x200, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x1d5, 0x33, @reassoc_req={@wo_ht={{}, {}, @broadcast, @device_a, @random="843932a1fd12"}, 0x0, 0x0, @broadcast, {}, @val={0x1, 0x1, [{}]}, @void, [{0xdd, 0x8, "83af68440887e60d"}, {0xdd, 0x5c, "9c2f8570f0b50a31aa5bde33ef4075cc62e74abec76522b557199b61dd36879e943e3cf99f3cacdf89af80fad7b0f5922894d1694baa018d4f414afc06150230aee253becbb840adcc95ff7dfd9f8cdd2e2ebd78b6abaf7e2760c0d6"}, {0xdd, 0x4e, "ebd4d3578d0b89bdc2585b7957ead33350967a9993b45406abd1b0aee923deff5b8f03f0b929849654dc8d5f00c0df15d922d0178501ee7525a25d6bba80b74fb782b7fbfe1a5e66ffe9204fc68d"}, {0xdd, 0x6, "955b1dd700b3"}, {0xdd, 0xe0, "672f8ff0553b7627474bc38d0de9b39bd5c3dc6514d5ae52f30a6fcba93e3f07691013e224a27a63c5e9f70ffbcf38d8eb6f6b4e360d121b30819659ade98406139420a413586a75dda54072c0a081dfd0e073235b31b95641e410a8ff014228f007c76fce737c28b5c8cf453b9e07905bab667a52083e8378984c6d868ec20065af2855d0746c7b6fa5ce66a908eb4a5904c01e3687c3cd9a8909d66c0dee891f24306a476031b73c6234c7b2019457f0eced1fd4b19be531959288afe2b836df3a83c53c2f22f242f651f24200a39dfd8272df2c055fd4f79f86d83855dcd8"}, {0xdd, 0x6, "2bac99018fbd"}]}}]}, 0x200}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 1457.677240][ T28] audit: type=1804 audit(1704695475.654:960): pid=32127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3930108561/syzkaller.BqTn8d/1665/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 06:31:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x112, 0x4, 0x0, 0x0) [ 1458.091768][T32125] debugfs: Directory 'netdev:' with parent 'phy15' already present! 06:31:18 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ef22000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0x12}]}}]}, 0x3c}}, 0x0) 06:31:18 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000002e0008002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00f7d5000451ff00001000000ac6173000008f8d36e90f"], 0x34}}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b1000f80b", 0x33fe0}], 0x1}, 0x0) 06:31:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)={0x1c, r1, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010d0000000000f0ff000700400008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f74192c6d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x58}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) [ 1460.640674][ T28] audit: type=1804 audit(1704695479.424:961): pid=32144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3930108561/syzkaller.BqTn8d/1666/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 1461.588114][ T28] audit: type=1804 audit(1704695479.424:962): pid=32151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3930108561/syzkaller.BqTn8d/1666/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 1462.364065][T32157] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.5'. 06:31:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x10d, 0x11, &(0x7f0000000080)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, 0xe8) [ 1462.721734][T32157] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). [ 1462.920842][ T28] audit: type=1800 audit(1704695479.524:963): pid=32136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="memory.events" dev="sda1" ino=1974 res=0 errno=0 06:31:23 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000002e0008002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00f7d5000451ff00001000000ac6173000008f8d36e90f"], 0x34}}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b1000f80b", 0x33fe0}], 0x1}, 0x0) 06:31:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000e000000100000000000000000000000000000000000000000000ffffe000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000af000000000000004800020063626328616573290004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000000400004c001400636d61632861657329"], 0x1a0}}, 0x0) [ 1464.725087][T32149] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1465.843435][T32163] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1465.952861][T32163] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). 06:31:24 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) 06:31:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x2, 0x6, 0x4f0, 0x350, 0x0, 0x350, 0x0, 0xd0, 0x420, 0x420, 0x420, 0x420, 0x420, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'ip6_vti0\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0xf3dd}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [], [], 'vcan0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) 06:31:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)={0x1c, r1, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010d0000000000f0ff000700400008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f74192c6d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x58}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) 06:31:25 executing program 2: r0 = socket(0x21, 0x2, 0x2) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x20}}, 0x0) 06:31:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000006400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@sndrcv={0x5000}], 0x30}], 0x1, 0x0) 06:31:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x18, r1, 0x321, 0x0, 0x0, {0x17}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 1467.924499][T32171] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains 06:31:26 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000002e0008002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00f7d5000451ff00001000000ac6173000008f8d36e90f"], 0x34}}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b1000f80b", 0x33fe0}], 0x1}, 0x0) 06:31:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000055000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="0000000003"], 0x38}}, 0x0) 06:31:27 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000b702000014000000b703001e000000008518000083000000bf0900008d9f00005509010000bf91000000000000b7020000007b8eed180000000000000086"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 06:31:27 executing program 2: r0 = socket(0x21, 0x2, 0x2) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x20}}, 0x0) [ 1469.799694][T32184] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1470.010780][T32184] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). 06:31:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8}], @vti_common_policy=[@IFLA_VTI_LINK={0x8}]]}}}]}, 0x40}}, 0x0) 06:31:29 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in6=@ipv4}}, 0xe8) 06:31:29 executing program 2: r0 = socket(0x21, 0x2, 0x2) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x20}}, 0x0) 06:31:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000055000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="0000000003"], 0x38}}, 0x0) 06:31:31 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000002e0008002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00f7d5000451ff00001000000ac6173000008f8d36e90f"], 0x34}}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b1000f80b", 0x33fe0}], 0x1}, 0x0) 06:31:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x2}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff00000002000000008e3dea6325ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff50100000010000140080c100000000068a3000000", 0x58}], 0x1) 06:31:31 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in6=@ipv4}}, 0xe8) 06:31:32 executing program 2: r0 = socket(0x21, 0x2, 0x2) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x20}}, 0x0) [ 1473.629269][T32205] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1473.841804][T32205] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). 06:31:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000055000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="0000000003"], 0x38}}, 0x0) 06:31:33 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in6=@ipv4}}, 0xe8) 06:31:33 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x44, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 06:31:34 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010"], 0x48}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="99", 0x10, 0x0, &(0x7f0000000140)={0x11, 0xc, r2, 0x1, 0x0, 0x6, @random="278046e4025f"}, 0x14) 06:31:35 executing program 2: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00'}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0x2, 0x0, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r2}, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000800)={0x0, 0x0, "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", "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"}) r4 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000300)={{r5, 0x200, 0x1000, 0x3, 0x1, 0x8, 0x4, 0x3, 0x6, 0x40000000, 0x100, 0x1, 0x3, 0xcc, 0x4cd}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001800)={r3, r5, "02b66c11beed7c64705a2327ec95767e4393a580b2c3043a2fcfb08839b8897467f4a525091f0f7d2480b2fbdcfd2a3924b674e8aed38628fb035a463934e151ef7c0289d4fd7b308135026f77657ca78a849330727be579703bef5f51cf16a7198f8eb8e962cc55e47a88645dc99b6e4dfd15399b64e979124ef3a9120208d05d9de3ff1ce9cc9e6353b97b13c914e3530a6ec5b967674f3cbc69538c66356f6777af618dd96e1730048727e1752cc8139776c1e5061154ffe7838008ce90ccbf0827c03a28016d5f3bdabbc98bee9c405509e3e094ba1677d6b347061c346722828810ba1b68424c585770f6527f3856630aedb97f2ed5ff2e013d5d412046", "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"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r11, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1d, 0x1, 0x200, 0x19d38, 0x140, r11, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, r12, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r11, 0xd0009412, &(0x7f0000001200)={r12, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002940)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {r13}, {r5}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {0x0, r14}, {}, {}, {}, {r13}, {}, {}, {r16, r14}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {r8}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {0x0, r14}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x81, "7464fbe08eb369"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000002840)=ANY=[@ANYRES64=r12, @ANYBLOB="00000100000000000700000000001800000000000104000008000000010000007fbe0000000000050000000000000008800000000000000100000000000000080000000000000000000000000000ebe79c373caa3942147e7cf81de0e73f6a456cbe9d8d660f1579fe7be66809e0624ee9fc43e9727263aa7b748a80ba0f5a18da57db688a5c8a850fcc00000000000000000000000000f0ffffffffffffff00000000000000000000c3f0886f2ee80ae3a72c924ddd9b7e2b7fbfaee41fe44558f674a19338baed630e562e3e68dc3b59"]) bind$rds(r1, &(0x7f0000000280)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000002b40)=ANY=[@ANYRES64=r12, @ANYBLOB="ffff0000000000000e74000000000000320000ebffffffffdf00000041b1c38fdda7ee6a1dc95fa3af8df5e000d69b164bcd2736092cc4ad032d92ef4f52646698677f7f5c52e800000000000900000000000000ff01000000000000000000000000000000100000000000000080000000000000080000000000000000008000000000c5258f6923d2b955fde84130a016001bfb2cbc7b7dd354c3b648000000000000011a7a430eda77f1735a2c1951144e96d91b35f659da215b83327d010d0f8d606655604eb4e4"]) r18 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r18, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r18, 0x0) r19 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r20 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r20, r19, 0x0, 0x100000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 06:31:36 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2}, 0x0, @in6=@ipv4}}, 0xe8) 06:31:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000055000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="0000000003"], 0x38}}, 0x0) [ 1478.148127][T32224] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? 06:31:37 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x44, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 06:31:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r4], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 06:31:38 executing program 5: mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x111fff7f97ca11f2, 0xffffffffffffffff, 0x0) 06:31:38 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xe) sendto$inet6(r0, &(0x7f0000000980)="bc", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x2c, &(0x7f0000000200), 0x15f}}], 0x2, 0x0, 0x0) 06:31:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000980)="bc", &(0x7f0000000000), 0x2}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) 06:31:39 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0xf, &(0x7f00001c9fff)="03", 0x1) 06:31:39 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg(r0, &(0x7f000000a180)=[{{&(0x7f00000037c0)=@isdn, 0x80, &(0x7f0000000080)=[{&(0x7f0000003840)="8fb660d80eef2e39b913d56edd", 0xd}], 0x1}}], 0x1, 0x0) [ 1481.419315][ T28] audit: type=1804 audit(1704695500.034:964): pid=32236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir339840382/syzkaller.xArHKo/1292/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 06:31:40 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x44, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 06:31:40 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r1, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010500000000000053ddd9007b26", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4, @ANYBLOB="08001f0004"], 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110057000b0007000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) [ 1482.523998][ T28] audit: type=1804 audit(1704695500.594:965): pid=32238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir339840382/syzkaller.xArHKo/1292/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 06:31:41 executing program 4: unshare(0x8060000) 06:31:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r4], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 06:31:41 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000980)="bc", &(0x7f0000000000), 0x2}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) 06:31:41 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0xf, &(0x7f00001c9fff)="03", 0x1) [ 1483.132049][T32252] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 06:31:43 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0xf, &(0x7f00001c9fff)="03", 0x1) 06:31:43 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000980)="bc", &(0x7f0000000000), 0x2}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) 06:31:43 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x44, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 06:31:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r4], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) [ 1484.995557][T32254] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 1485.104170][ T28] audit: type=1804 audit(1704695503.874:966): pid=32264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir339840382/syzkaller.xArHKo/1293/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 1485.201761][T32254] bond4: (slave batadv6): Enslaving as a backup interface with an up link 06:31:44 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0xf, &(0x7f00001c9fff)="03", 0x1) [ 1486.002588][ T28] audit: type=1804 audit(1704695504.614:967): pid=32270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir339840382/syzkaller.xArHKo/1293/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 06:31:44 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000980)="bc", &(0x7f0000000000), 0x2}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) [ 1487.397126][T32258] bond4 (unregistering): (slave batadv6): Releasing backup interface 06:31:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8}]}, 0x24}}, 0x0) [ 1487.812056][ T28] audit: type=1804 audit(1704695506.564:968): pid=32278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1257489627/syzkaller.DQKjpI/877/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 1489.401589][ T28] audit: type=1804 audit(1704695507.504:969): pid=32284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1257489627/syzkaller.DQKjpI/877/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 1489.635042][T32258] bond4 (unregistering): Released all slaves [ 1489.900142][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.909446][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 06:31:50 executing program 1: r0 = epoll_create1(0x0) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x2001}) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x80000000, 0x0, 0xfdffffff00000000) close(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) shutdown(r1, 0x0) close(r0) 06:31:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r4], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 06:31:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xfffffffffffffdea, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_RTAB]}}]}, 0x64}}, 0x0) 06:31:50 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000015c0)={0x18, 0x3a, 0xb, 0x0, 0x0, {0x4}, [@nested={0x4}]}, 0x18}}, 0x0) 06:31:50 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) 06:31:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r4], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) [ 1491.675650][T32292] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 06:31:50 executing program 5: r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000001940)={&(0x7f00000003c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000400)="9d", 0x1}], 0x1}, 0x5dc) sendmsg$inet(r0, &(0x7f0000001500)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)="d0", 0x1}], 0x1}, 0x850) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="de", 0x1}], 0x1}, 0x8051) close(r0) 06:31:51 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000015c0)={0x18, 0x3a, 0xb, 0x0, 0x0, {0x4}, [@nested={0x4}]}, 0x18}}, 0x0) [ 1492.332217][ T28] audit: type=1804 audit(1704695511.114:970): pid=32300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1257489627/syzkaller.DQKjpI/878/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 1493.171331][T32301] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. 06:31:52 executing program 1: r0 = epoll_create1(0x0) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x2001}) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x80000000, 0x0, 0xfdffffff00000000) close(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) shutdown(r1, 0x0) close(r0) [ 1493.487944][ T28] audit: type=1804 audit(1704695512.104:971): pid=32299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1257489627/syzkaller.DQKjpI/878/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 06:31:52 executing program 3: r0 = epoll_create1(0x0) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x2001}) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x80000000, 0x0, 0xfdffffff00000000) close(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) shutdown(r1, 0x0) close(r0) [ 1494.756866][ T28] audit: type=1804 audit(1704695512.544:972): pid=32311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir339840382/syzkaller.xArHKo/1294/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 06:31:53 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000015c0)={0x18, 0x3a, 0xb, 0x0, 0x0, {0x4}, [@nested={0x4}]}, 0x18}}, 0x0) [ 1494.931568][ T28] audit: type=1804 audit(1704695512.724:973): pid=32298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir339840382/syzkaller.xArHKo/1294/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 06:31:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r4], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 06:31:53 executing program 5: r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000001940)={&(0x7f00000003c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000400)="9d", 0x1}], 0x1}, 0x5dc) sendmsg$inet(r0, &(0x7f0000001500)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)="d0", 0x1}], 0x1}, 0x850) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="de", 0x1}], 0x1}, 0x8051) close(r0) 06:31:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r4], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 06:31:55 executing program 1: r0 = epoll_create1(0x0) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x2001}) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x80000000, 0x0, 0xfdffffff00000000) close(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) shutdown(r1, 0x0) close(r0) [ 1497.273744][ T28] audit: type=1804 audit(1704695516.064:974): pid=32332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir339840382/syzkaller.xArHKo/1295/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 06:31:56 executing program 3: r0 = epoll_create1(0x0) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x2001}) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x80000000, 0x0, 0xfdffffff00000000) close(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) shutdown(r1, 0x0) close(r0) [ 1497.723814][ T28] audit: type=1804 audit(1704695516.234:975): pid=32333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1257489627/syzkaller.DQKjpI/879/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 06:31:57 executing program 5: r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000001940)={&(0x7f00000003c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000400)="9d", 0x1}], 0x1}, 0x5dc) sendmsg$inet(r0, &(0x7f0000001500)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)="d0", 0x1}], 0x1}, 0x850) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="de", 0x1}], 0x1}, 0x8051) close(r0) 06:31:57 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000015c0)={0x18, 0x3a, 0xb, 0x0, 0x0, {0x4}, [@nested={0x4}]}, 0x18}}, 0x0) [ 1498.881674][ T28] audit: type=1804 audit(1704695517.054:976): pid=32338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir339840382/syzkaller.xArHKo/1295/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 06:31:57 executing program 1: r0 = epoll_create1(0x0) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x2001}) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x80000000, 0x0, 0xfdffffff00000000) close(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) shutdown(r1, 0x0) close(r0) [ 1499.452070][ T28] audit: type=1804 audit(1704695517.054:977): pid=32333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1257489627/syzkaller.DQKjpI/879/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 06:31:59 executing program 3: r0 = epoll_create1(0x0) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x2001}) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x80000000, 0x0, 0xfdffffff00000000) close(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) shutdown(r1, 0x0) close(r0) 06:31:59 executing program 5: r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000001940)={&(0x7f00000003c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000400)="9d", 0x1}], 0x1}, 0x5dc) sendmsg$inet(r0, &(0x7f0000001500)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)="d0", 0x1}], 0x1}, 0x850) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="de", 0x1}], 0x1}, 0x8051) close(r0) 06:32:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x44, r1, 0x1, 0x0, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}}, 0x0) 06:32:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @local}, @in={0x2, 0x4e21, @broadcast}], 0x20) 06:32:03 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}, @in6={0xa, 0x4e21, 0x0, @private2}], 0x38) 06:32:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}}, 0x0) 06:32:04 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)={0x178, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_CSA_IES={0x158, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x40, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x35, 0x3, "8acb1bb4fdbea66cb3e802258a45e69fe0cf0ce6ec285ddc3fa59ef62dae30b756559b033a6f8adac21174cd2f11ac66e7"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x111, 0xe, {@wo_ht={{}, {}, @device_b, @broadcast, @random="e00cce159393"}, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2}, @val={0x5, 0x40, {0x0, 0x0, 0x0, "b5491027577982d8853ab34f5fa2665f75987b0cfe359854a1eb10210ea3ae5054d139c42d1af19d0e115e7333281ba3c0dd2bf72d9fbecfd5c6e64853"}}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}, [{0xdd, 0x33, "1ac02d755271d9a24e21f460cf3c41fc233d3d07f619c1b2163b8eca174bf1d7050fc33cc81755dd576a2e2a9eb09b6d535614"}, {0xdd, 0x3d, "6bfc2506e1fb8d7bfd363a3468f779d03e9c2d5702b837cc06680faf789abc8767261836dd9097f4045fd0651567f826c570905ef403a01c91edcc380d"}]}}]]}]}, 0x178}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 06:32:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @local}, @in={0x2, 0x4e21, @broadcast}], 0x20) 06:32:05 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000000040)="0f", 0x1}], 0x1}}, {{&(0x7f0000001480)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}}], 0x2, 0x40) 06:32:05 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000040)=0xfe, 0x4) connect$pptp(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x2, {0x401, @private=0xa010101}}, 0x1e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x491a}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3f}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000001740)='hrtimer_expire_entry\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x26e1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x5, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 06:32:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000004180)=ANY=[], 0xff77) clock_gettime(0x0, &(0x7f0000004bc0)) recvmmsg(r1, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}}], 0x1, 0x0, 0x0) 06:32:06 executing program 3: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000540)) 06:32:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (fail_nth: 1) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:32:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000004180)=ANY=[], 0xff77) clock_gettime(0x0, &(0x7f0000004bc0)) recvmmsg(r1, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}}], 0x1, 0x0, 0x0) 06:32:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @local}, @in={0x2, 0x4e21, @broadcast}], 0x20) 06:32:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x9203, 0x8, 0x28b, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) [ 1509.546459][T32385] FAULT_INJECTION: forcing a failure. [ 1509.546459][T32385] name failslab, interval 1, probability 0, space 0, times 1 06:32:08 executing program 3: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000540)) 06:32:09 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @local}, @in={0x2, 0x4e21, @broadcast}], 0x20) 06:32:09 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000004180)=ANY=[], 0xff77) clock_gettime(0x0, &(0x7f0000004bc0)) recvmmsg(r1, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}}], 0x1, 0x0, 0x0) [ 1511.843730][T32385] CPU: 1 PID: 32385 Comm: syz-executor.5 Not tainted 6.7.0-rc8-syzkaller-00126-gac631873c9e7 #0 [ 1511.854235][T32385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1511.864330][T32385] Call Trace: [ 1511.867647][T32385] [ 1511.870609][T32385] dump_stack_lvl+0x125/0x1b0 [ 1511.875356][T32385] should_fail_ex+0x496/0x5b0 [ 1511.880180][T32385] should_failslab+0x9/0x20 [ 1511.884925][T32385] kmem_cache_alloc_lru+0x7a/0x6f0 [ 1511.890097][T32385] ? preempt_count_sub+0x160/0x160 [ 1511.895301][T32385] ? sock_alloc_inode+0x25/0x1c0 [ 1511.900392][T32385] ? vfs_write+0x14c/0xdf0 [ 1511.904865][T32385] ? sock_free_inode+0x30/0x30 [ 1511.909695][T32385] ? sock_alloc_inode+0x25/0x1c0 [ 1511.914688][T32385] sock_alloc_inode+0x25/0x1c0 [ 1511.919510][T32385] alloc_inode+0x5d/0x220 [ 1511.923904][T32385] new_inode_pseudo+0x16/0x80 [ 1511.928654][T32385] sock_alloc+0x40/0x270 [ 1511.932954][T32385] __sock_create+0xbc/0x800 [ 1511.937529][T32385] __sys_socket+0x14c/0x260 [ 1511.942089][T32385] ? fput+0x30/0x1a0 [ 1511.946046][T32385] ? update_socket_protocol+0x10/0x10 [ 1511.951481][T32385] ? ksys_write+0x1a7/0x250 [ 1511.956061][T32385] ? __ia32_sys_read+0xb0/0xb0 [ 1511.960885][T32385] __x64_sys_socket+0x72/0xb0 [ 1511.965626][T32385] do_syscall_64+0x40/0x110 [ 1511.970196][T32385] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1511.976143][T32385] RIP: 0033:0x7fbf6d27eaa7 [ 1511.980602][T32385] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1512.000342][T32385] RSP: 002b:00007fbf6bbbb008 EFLAGS: 00000287 ORIG_RAX: 0000000000000029 [ 1512.008806][T32385] RAX: ffffffffffffffda RBX: 00007fbf6d3ac1f0 RCX: 00007fbf6d27eaa7 [ 1512.016818][T32385] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1512.024826][T32385] RBP: 00007fbf6bbbc120 R08: 0000000000000000 R09: 0000000000000000 [ 1512.032833][T32385] R10: 00000000200002c0 R11: 0000000000000287 R12: 0000000000000001 [ 1512.040845][T32385] R13: 0000000000000036 R14: 00000000200002c0 R15: 00007ffce6de8418 [ 1512.048879][T32385] [ 1512.326176][T32400] trusted_key: syz-executor.4 sent an empty control message without MSG_MORE. 06:32:11 executing program 3: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000540)) [ 1512.417159][T32385] socket: no more sockets 06:32:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000440)="4599783b011d2299") r1 = socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2800003, 0x10012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 06:32:11 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000040)=0xfe, 0x4) connect$pptp(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x2, {0x401, @private=0xa010101}}, 0x1e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x491a}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3f}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000001740)='hrtimer_expire_entry\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x26e1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x5, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 06:32:11 executing program 3: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000540)) 06:32:11 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000004180)=ANY=[], 0xff77) clock_gettime(0x0, &(0x7f0000004bc0)) recvmmsg(r1, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}}], 0x1, 0x0, 0x0) [ 1513.312419][ T28] audit: type=1804 audit(1704695532.104:978): pid=32408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir102709967/syzkaller.A4hqKL/1720/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 06:32:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:32:13 executing program 0: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x17, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x2}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {}, {}, {}, {0x25}}], {{0x5}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000000c0)='GPL\x00', 0x3}, 0x90) [ 1514.834134][ T28] audit: type=1804 audit(1704695532.134:979): pid=32407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir102709967/syzkaller.A4hqKL/1720/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 06:32:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000440)="4599783b011d2299") r1 = socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2800003, 0x10012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 06:32:14 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1}, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 06:32:15 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000000), 0x4) 06:32:16 executing program 4: r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) 06:32:18 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000000), 0x4) 06:32:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x44, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x27, 0x33, @action={@with_ht={{{}, {}, @device_a, @broadcast}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @void}}}}]}, 0x44}}, 0x0) 06:32:20 executing program 4: r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) [ 1521.690403][ T28] audit: type=1804 audit(1704695540.474:980): pid=32433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir102709967/syzkaller.A4hqKL/1721/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 06:32:21 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000040)=0xfe, 0x4) connect$pptp(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x2, {0x401, @private=0xa010101}}, 0x1e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x491a}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3f}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000001740)='hrtimer_expire_entry\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x26e1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x5, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 06:32:21 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000300)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)={0x0, 0x1, 0x1, 'b'}, 0x9) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r2, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000cc0)={r2, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x4, 0xf801, 0x4, 0x7, 0x43}, 0x9c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d80)={0x6c, r4, 0x1, 0x10000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="278b81afd7db"}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1000, 0x1, 0x7, 0x0, {0x1, 0x3, 0x0, 0x6, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x800, 0x5, 0x8}}]}, 0x6c}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=@data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4}, @device_a, @broadcast, @random="2c4d118fdaed", {0x2, 0x1f}}, {0x1, 0x0, 0x2, 0x0, 0x40}}, {@type11={{0x0, 0x2, 0x8}, {0x3}, @device_a, @device_a, @initial, {0x5, 0x80}, @broadcast}, {0xa, 0x1, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0x3, 0x3, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, @random="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"}, 0x779) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:32:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x44, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x27, 0x33, @action={@with_ht={{{}, {}, @device_a, @broadcast}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @void}}}}]}, 0x44}}, 0x0) 06:32:21 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000000), 0x4) 06:32:21 executing program 4: r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) 06:32:29 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000440)="4599783b011d2299") r1 = socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2800003, 0x10012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 06:32:29 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000000), 0x4) 06:32:29 executing program 4: r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) 06:32:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x44, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x27, 0x33, @action={@with_ht={{{}, {}, @device_a, @broadcast}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @void}}}}]}, 0x44}}, 0x0) 06:32:29 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000300)="1ae96d0103010000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)={0x0, 0x1, 0x1, 'b'}, 0x9) (async, rerun: 32) r1 = socket$inet(0x2, 0x80001, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r2, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000cc0)={r2, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x4, 0xf801, 0x4, 0x7, 0x43}, 0x9c) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d80)={0x6c, r4, 0x1, 0x10000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="278b81afd7db"}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1000, 0x1, 0x7, 0x0, {0x1, 0x3, 0x0, 0x6, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x800, 0x5, 0x8}}]}, 0x6c}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=@data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4}, @device_a, @broadcast, @random="2c4d118fdaed", {0x2, 0x1f}}, {0x1, 0x0, 0x2, 0x0, 0x40}}, {@type11={{0x0, 0x2, 0x8}, {0x3}, @device_a, @device_a, @initial, {0x5, 0x80}, @broadcast}, {0xa, 0x1, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0x3, 0x3, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, @random="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"}, 0x779) (async, rerun: 32) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async, rerun: 32) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1530.831747][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! 06:32:29 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000040)=0xfe, 0x4) connect$pptp(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x2, {0x401, @private=0xa010101}}, 0x1e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x491a}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3f}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000001740)='hrtimer_expire_entry\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x26e1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x5, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 06:32:30 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 06:32:30 executing program 4: bpf$PROG_LOAD(0x9, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) 06:32:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x44, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x27, 0x33, @action={@with_ht={{{}, {}, @device_a, @broadcast}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @void}}}}]}, 0x44}}, 0x0) [ 1533.018139][ T28] audit: type=1804 audit(1704695551.804:981): pid=32476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir102709967/syzkaller.A4hqKL/1722/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 06:32:31 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r1) 06:32:32 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000140)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) 06:32:32 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000300)="1ae96d0103010000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)={0x0, 0x1, 0x1, 'b'}, 0x9) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r2, 0x1}, 0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000cc0)={r2, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x4, 0xf801, 0x4, 0x7, 0x43}, 0x9c) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d80)={0x6c, r4, 0x1, 0x10000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="278b81afd7db"}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1000, 0x1, 0x7, 0x0, {0x1, 0x3, 0x0, 0x6, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x800, 0x5, 0x8}}]}, 0x6c}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=@data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4}, @device_a, @broadcast, @random="2c4d118fdaed", {0x2, 0x1f}}, {0x1, 0x0, 0x2, 0x0, 0x40}}, {@type11={{0x0, 0x2, 0x8}, {0x3}, @device_a, @device_a, @initial, {0x5, 0x80}, @broadcast}, {0xa, 0x1, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0x3, 0x3, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, @random="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"}, 0x779) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:32:35 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000440)="4599783b011d2299") r1 = socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2800003, 0x10012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r1], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 06:32:35 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000140)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) 06:32:36 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000140)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) 06:32:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000010000000000000640001000006020202020202010882848b960c121824"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1538.704559][ T28] audit: type=1804 audit(1704695557.494:982): pid=32504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir102709967/syzkaller.A4hqKL/1723/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 06:32:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}}, 0x0) 06:32:38 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000140)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x0) 06:32:40 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200000800000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='ext4_alloc_da_blocks\x00', r0}, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 06:32:41 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200000800000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='ext4_alloc_da_blocks\x00', r0}, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 06:32:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000010000000000000640001000006020202020202010882848b960c121824"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:32:42 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r1) 06:32:42 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r1) 06:32:42 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a000100000000000000000081800000", @ANYRES32=0x0, @ANYBLOB="00000000140001"], 0x30}}, 0x0) 06:32:44 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200000800000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='ext4_alloc_da_blocks\x00', r0}, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 06:32:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYRESOCT], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'veth0\x00'}, 0x18) 06:32:45 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000010000000000000640001000006020202020202010882848b960c121824"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:32:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYRESOCT], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'veth0\x00'}, 0x18) 06:32:46 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, 0x0, 0x0) 06:32:46 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200000800000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='ext4_alloc_da_blocks\x00', r0}, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 06:32:46 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r1) 06:32:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYRESOCT], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'veth0\x00'}, 0x18) 06:32:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x16, 0x0, 0x0) 06:32:49 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r1) 06:32:49 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) 06:32:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x6, 0x6, 0x49, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7817, 0x20, 0x9f, 0x4}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x200048c1}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1551.343630][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.361665][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.878333][T32569] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 06:32:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x16, 0x0, 0x0) 06:32:51 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="b2ff", 0x2}], 0x1) readv(r0, &(0x7f0000000040), 0x10) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000540)='U ', 0x2}], 0x1, 0x0, 0x0) 06:32:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYRESOCT], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'veth0\x00'}, 0x18) 06:32:51 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r1) 06:32:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x16, 0x0, 0x0) 06:32:54 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r1) 06:32:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x16, 0x0, 0x0) 06:32:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x6, 0x6, 0x49, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7817, 0x20, 0x9f, 0x4}}) (rerun: 32) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x200048c1}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async, rerun: 32) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (rerun: 32) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:32:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 06:32:55 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x6, 0x1, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001640)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000001600)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/234}, 0x20) 06:32:56 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000002740)={0x0, 0x0, 0x0}, 0x0) 06:32:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x20, 0x5f, 0x1, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) 06:32:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x6, 0x6, 0x49, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7817, 0x20, 0x9f, 0x4}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x200048c1}, 0x0) (async, rerun: 64) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async, rerun: 64) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async, rerun: 32) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async, rerun: 32) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:32:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="0000010100"}]}, 0x40}}, 0x0) 06:32:58 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r7}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r9}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r11, 0x6, 0x3, &(0x7f0000000040)=0xb6, 0x4) connect$bt_l2cap(r11, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 06:33:00 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 06:33:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xc4, r3, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x62}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_DATA={0x88, 0xc5, "ed1f7447c3212cae6f70ea952b17abf1f47df17a88ed8e9c268f8cdd2b34036d1942d4aaea97d746a6cbeab12348e8bf29487029c2ffb29327323c5d76370c1c722b0bf7df03c001adf6222f9eeaec496ba0dc07626ec84422642db14723f2ce507b09c5c8790769a70e06ef4f68b99eb894b3e71af0ea821d8a863fc44d3f20eeabe0a3"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}]}, 0xc4}, 0x1, 0x0, 0x0, 0x44015}, 0x0) r4 = accept(r0, &(0x7f00000006c0)=@nl, &(0x7f0000000740)=0x80) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000001880)={&(0x7f0000000780), 0xc, &(0x7f0000001840)={&(0x7f00000007c0)={0x1068, 0x13, 0x20, 0x70bd26, 0x25dfdbfd, {0x2f, 0xf5, 0x0, 0x4, {0x4e21, 0x4e20, [0x6, 0x7fffffff, 0x425, 0x3], [0x4, 0xffffffff, 0x10001, 0x212], 0x0, [0x8, 0x8]}, 0x7f, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x13, 0x1, "29889051cbcaad6789c16a5b18a2dc"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x1068}, 0x1, 0x0, 0x0, 0x4008}, 0x44) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000018c0)={r0}, 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x74, r6, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @random="95b79544b61d"}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @initial, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:33:03 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x9}, 0x0, 0x0, 0x0) 06:33:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000002000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="b0", 0x1}], 0x1}}], 0x1, 0x0) 06:33:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newrule={0x30, 0x20, 0x26326c36b9e27041, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_macvtap\x00'}]}, 0x30}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) bind$inet6(r2, &(0x7f0000f65000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000080)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 06:33:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x54, r1, 0x911, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7fff}, {0xc}}]}, 0x54}}, 0x0) 06:33:03 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r7}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r9}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r11, 0x6, 0x3, &(0x7f0000000040)=0xb6, 0x4) connect$bt_l2cap(r11, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) [ 1565.051802][ T5097] Bluetooth: hci3: command 0x0405 tx timeout 06:33:04 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x1d, r1, 0x3}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@canfd={{}, 0x48, 0x0, 0x0, 0x0, "5a925582b3d351461202465b37986891e14329644fe570b63c1178fb832bc83942ad2a2a2922d89206cb04a541fbd52c4f4639c8edf88f8d89876c0d3599de92"}, 0x48}}, 0x0) 06:33:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000002000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="b0", 0x1}], 0x1}}], 0x1, 0x0) 06:33:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newrule={0x30, 0x20, 0x26326c36b9e27041, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_macvtap\x00'}]}, 0x30}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) bind$inet6(r2, &(0x7f0000f65000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000080)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 06:33:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000002000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="b0", 0x1}], 0x1}}], 0x1, 0x0) 06:33:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000002000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="b0", 0x1}], 0x1}}], 0x1, 0x0) 06:33:07 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x1d, r1, 0x3}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@canfd={{}, 0x48, 0x0, 0x0, 0x0, "5a925582b3d351461202465b37986891e14329644fe570b63c1178fb832bc83942ad2a2a2922d89206cb04a541fbd52c4f4639c8edf88f8d89876c0d3599de92"}, 0x48}}, 0x0) [ 1569.962458][ T5097] Bluetooth: hci3: command 0x0405 tx timeout 06:33:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000002000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="b0", 0x1}], 0x1}}], 0x1, 0x0) 06:33:08 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r7}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r9}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r11, 0x6, 0x3, &(0x7f0000000040)=0xb6, 0x4) connect$bt_l2cap(r11, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 06:33:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newrule={0x30, 0x20, 0x26326c36b9e27041, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_macvtap\x00'}]}, 0x30}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) bind$inet6(r2, &(0x7f0000f65000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000080)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 06:33:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xc4, r3, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x62}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_DATA={0x88, 0xc5, "ed1f7447c3212cae6f70ea952b17abf1f47df17a88ed8e9c268f8cdd2b34036d1942d4aaea97d746a6cbeab12348e8bf29487029c2ffb29327323c5d76370c1c722b0bf7df03c001adf6222f9eeaec496ba0dc07626ec84422642db14723f2ce507b09c5c8790769a70e06ef4f68b99eb894b3e71af0ea821d8a863fc44d3f20eeabe0a3"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}]}, 0xc4}, 0x1, 0x0, 0x0, 0x44015}, 0x0) r4 = accept(r0, &(0x7f00000006c0)=@nl, &(0x7f0000000740)=0x80) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000001880)={&(0x7f0000000780), 0xc, &(0x7f0000001840)={&(0x7f00000007c0)={0x1068, 0x13, 0x20, 0x70bd26, 0x25dfdbfd, {0x2f, 0xf5, 0x0, 0x4, {0x4e21, 0x4e20, [0x6, 0x7fffffff, 0x425, 0x3], [0x4, 0xffffffff, 0x10001, 0x212], 0x0, [0x8, 0x8]}, 0x7f, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x13, 0x1, "29889051cbcaad6789c16a5b18a2dc"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x1068}, 0x1, 0x0, 0x0, 0x4008}, 0x44) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000018c0)={r0}, 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x74, r6, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @random="95b79544b61d"}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @initial, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xc4, r3, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x62}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_DATA={0x88, 0xc5, "ed1f7447c3212cae6f70ea952b17abf1f47df17a88ed8e9c268f8cdd2b34036d1942d4aaea97d746a6cbeab12348e8bf29487029c2ffb29327323c5d76370c1c722b0bf7df03c001adf6222f9eeaec496ba0dc07626ec84422642db14723f2ce507b09c5c8790769a70e06ef4f68b99eb894b3e71af0ea821d8a863fc44d3f20eeabe0a3"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}]}, 0xc4}, 0x1, 0x0, 0x0, 0x44015}, 0x0) (async) accept(r0, &(0x7f00000006c0)=@nl, &(0x7f0000000740)=0x80) (async) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000001880)={&(0x7f0000000780), 0xc, &(0x7f0000001840)={&(0x7f00000007c0)={0x1068, 0x13, 0x20, 0x70bd26, 0x25dfdbfd, {0x2f, 0xf5, 0x0, 0x4, {0x4e21, 0x4e20, [0x6, 0x7fffffff, 0x425, 0x3], [0x4, 0xffffffff, 0x10001, 0x212], 0x0, [0x8, 0x8]}, 0x7f, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "3e94a14656f3daa6d4065ef1d4da3d27e4a59f1dc750dadd788cfdc1821d085b2b14a8fe508108990ccf7e55c4ce5254290c15d431bab7ece957cb111a16e5d7e1cf18f9df890d642b8c60543d8a4cee038b7762478b9c5076949b4e1691d72b0ef7363cf2ccc0ffd7476b35cf4a8cb60fb48dd9e68fe993035af5c91b899766d563f6517539b2c00cf172e4d727c6f7d8a9e85e992447e6a131325138ba2283ea2bdc27a3714bd953f217fe706e8d3ee6100224978f96868dadbf7dae92ac869b0ddf08d7cf0d55e0b1574bb79fcefc6b221547b21b5c227b590cafff9c2e5614568ebd83c142675845dd8a983bf8cd45458c631bf8e43cfa0da99cf687493d4c1690554b95c831f63b8eb98f5d808b25300e2933e490013660e48926d8485769b84f8ab59e9781a8623d20096adc32a49b3d6bfe031530cc492cf58dd0ebc4803404f4d8f1bb65e30c866afc065f5077bdd67a67a7ce30c9583ea77730589d6a0d503fdc4ef4445f7c83ebb6cf2f8fc0c2df512cdc4fdd895e872f820f6b7a62f05703a8d1a637c81c20045db7d31bcf585f3df4166027cdf2f70f9391baa56bc495607316bf079c1fbd245b0ee4bff69cfdbe96c80b0c5c34c5e9798e9f410943fee7b611d9150f77c07a7201b82b49fbe8e95bc13ce033abb8728df09805d27ea89eb6c228d5bf89daa9caa117f5c0f079d19d81700a278da9e5b0d8e82a29455faf2bf941673eff2901dcb61f5370136c3797ee65c0058344cdd9969403243437205071153f3b63f5862095c884863d368c3aeb429129f4ac5b836d3d1b09999891e1099879d813cc67baddfe8d0d115f6e0e99770d5e718439fa93ae9ee418042c6d424ea336274a1282b5573d430a2a1790b62c6cd05c3e0508bf2b5aa468c130d335765cad08b34bfed563948777c589bd60be908f942d3a1a428fb4ebe8513ec6027b8cb42d473599df7fbe31e326ddeb0f67369b376ed3b5323af3b72cd9f08a56c7e353c76a95330644aff5961ce576a0a4dd6f0541dc030a678d8f3f4d5e230e8248d2a68f8f9a53e870aebadc42c3fda8c906f2db1363ec2401209c181c42e85bc3fd3f8c1a543e16ce3a2c69f63ec280ce14fe7cd793883dba60501b4406a54346715ccefb6da79200263a7bea3cac9491994712f4224eecddda14fbb94e7d539bd7067e44977c3b836196fdb489c645938681afc2ee041a4ba39d66ab04d6cb6d49ed2b14977a1fd4cef3423811fd4384041bb171eaca0cc0f59295dfb52838d5cf0e7d4770e5f1cff5e2d3bf33e86542a6d9fe401ce999e4c98b6c9d7b79c6a19c15fe2a417a930672c162b9e6943245e5f2d5be65f27deacb8123022ce054c6b31f2225a2e4c2fbb5967d05ccda345141daf7eda49f81a7a04d9ac4b71dd86cf990099e93d62537e6ef7d417483364f3bc9b5222055f95435441a4f59830444e9c417362248ac1b9e1e5aafe44ef4b7f8c32805a8f37f20113914200818d78f45d578efd84bb486b649397705428676f12acf5bec06ad657fcfd831ad6482541a74f0dc963944acce53e6983bbe877a2881eb2f1c7fa765c9c04529adca2d8492b0838b790e588b5f10d5fe996996d0f18dba04aa2b7e4408061392a9273d7ee7f9a1d107b34e92fe2c1ecfcbf8b961c97b6a01b5ae00fb688e73b5c8cc613e567241b91d1b76a7f528fa7a37f3872512214ef8bdf018781f76eed0fb3438696c30055774bc2fc0f5f699b3b9594d2523f1242ae4cd3f666476c6513a4336e159f426f5c20834081e65d7582575ad670127ca24e1238b101f382e4343f00fea7d83fe4f02a0142a375b22065fc0b9a07c5797cc685c3b6347770ee506ac31487f63585c0beda275b72d1e8ac0adf6479487b17bf940d844c603a75c86888b581d81ba6aafd5775c1f5b129c2f552e8946f58754c8ba3b6548e6702881968284bab49b3f6d334ee19132b784eb2d9842820f871614b6c9b9dc7a54dba3ddb0082dbf8928ac3d2ca47e84f1503f3db8d6c6faedc420f39029a7f9e66c4c1e94906748bf017ef03261916542fc7b0e60e8c0053530bd38661a455bd4fe510261d0123d35e573dcc4e76b61af00ce3fb93c841ea2ef22807d25538ad64fdbf12e1c33a039950fd69d35493735fa39a085dcbb583442de5cecfd948a0352d1eb164a7c00510c9f752afdd282f114d87635f4dd52416442808be0ac5b5d4fe6b4876cbf9f7d3ab12b58f0fac57cdbbf3afd72227651fcfb8c9542c251f2d5a8981aefd79e2545521f77bf3343451ce0bcd7c722d2a4dbc0a82aaca13aab6b1f349a184d5e2ba99c75d6d983a3955576764e7b47e2ba4433ed535f1ba552c09dc3bdde18fbff6062c83d7f0315f25a1e2953a232fd1b752e5aa2ab7457b69eb5c291d24ab7d783fe65a05e7c8d92212bd499bc115377dc812555fb22d78ef0c7a992f2994391ae3e16c4c52a1a596d68e8d3525ecd42e011f221cdee7ff458270bbda13526f0a9a370127b527259a1489552f8979da2ee4310d105c3bcedfec79bdfdb4efc11525d5503e1268e053a465911296ccbf90ffcb7ed4974c152ed4910dfa224e2aab520724180d6460e16a833d9aa5de4ca6108f192bc66c116b71ef61c5766496b13052f95b3a899a9184a56ff1b17a2c30768dd3097f76187880cefa7544a2122a77bd4d36207c4400b2cd8d51770e42b9406d7d81d5092899c01a7becddea03ec632d6620a8d3930126d930a5265ca76f9a03b0d0382aa7279e2aa827123ed68ca4ba5b7c20786f3e5f4e34bd8c7d10ba03e39cae945ecb613b8ad595371ad93e410cf06e72dda5b7a1e5fec1502205aa66507d0a0407ef5fd4a18f00111e7f6ef1e3e979f52dfd03496e0e1849b23eb109d3499ba7438dfa6c0dc26ba40579f20df7571626b06b9690c27849fe1842dcf8bc46f493dfa8c563da7292367a2b16cebc19f58ab23c2202c034c64c0c6d1cc369d97940aac95ea08d74f0d4b967ad938a526dbf49cbc5058a4d2d8af9b8b4a70f12d293eabec7b0460a17c1b68ae627c92da0319e87660ff41e484a68c85642707b47fbd651326c0b44495b6ed1edcbf5ec7d3e3cd6d49d6fe1ae1442f9d3a53c719245c800ed9ab8883e2f18b0fc81917fa4046c7c75236b971a444c8c82872755258fcb3f212198efc9837f37aa81514124d8cdb412d890729a0362cf1c7d1642f228d7f9af83ddc3e05100180bc6fa286d3b633d814279eba23ff2d5d2449c1e90bf6087e85f628b22b3b73a7e9753e92164806590b7a5999380eb73420453470933afaf680139f1a1de273326be54f8999639768f43f11f988f1a983c35f0d8e8ed8a07be92ceaa4828bb170753d4918ea07644edd7f5ad0e7abed85bdea09aaea97e19a83eb378021d5c0eee99f74d354b844e632d4158a0d471478aa1a6adc4fc56cd6c071dfe409665042a5d668878bc5cb7cbc5a9a5fa279804f27cd521a2e94fa858c3ff356802ab043a26ae87bc1be0599592faaa39a84b49378a649aff1a2ce50d342dd0ebcc5666f43fd45d75a1d3cbf1febeea56c7d62878180ee3263e0167743d448d5074174f3249d336fbd5bbe92088c482ea4cf86fb21f87ca5097e28acbabea90fde1067f7a8ca0183f091eaed726941017afd4713e6234027d803fe1a12b8d3ad0ae5a29c44f04c1c9d6e967415e0ffb41c3d3d199772b6f0ca175994b20d30120b6fe799a101f6ace16ea8d412ca0d6f40a576c10ea9d7038d22e70a0eb9a515103e4a0d64325b6c16f0504aa7ab6fd762a5029079ae0ebd114f459b23d9fe39f1aff981646bb9c38872878d03c3be43a5d0381d78436efd92385ab68494aaa7aa39f35a87ccf42d0eca514bdd3112cb051cb6fab4949712ba6daa809dbad027bf033316100b804dc9da192e4f152762b5494bcb964bb2c594bf31637fd330835c599c3e47df47c116304e5f4e42ef291937deaf46ebb658cb3d6a973d910f2a2030de4f1439f3bdecd0457be2742f4d54a6d8906a1d1c5a7fa484fd070165d9386d77ef28fb358db4b3452ba319e274e337d7696da81f6eaa1d088fb2f11e04c41ebef98839f989a6fdf06dbb51c8541238cc0ce362ea01a3e9ec2dca3a7c39aab34d5f374c3ced4b947cf2846852dd23c7726b5299a3efa610e7d05d47c58dbad5d86d75c938a821a9b73ada35d3862b9b32bce071fa489b28ee71b9ee6840cf5640ad5ac25c5804f7863835df64915298bfb1449077dec4f064d43615b133a0c60a9f9a2868ebcbfe53dd54b244de6fd47bdd307ae7cf1235b1d99f2ff931c8068bf1a2ffd33d8a5f3cedbd1932d3fddda8c30c99fa755611b5da9e41986f53ca7b80192f667816d0d6c3c7e835a9afd4c357f55ee8e45fbb2119bec082ec13ba151c8daff47677bc63a3e8f6a7d1569af5f96f162e996dca2b8800ebeee9b5582afb06a117dcc968b0111bfa20c2d44b1adff205df0207cfa9ab2b6561a665792f74d6e4e5db938dd75f970b3bf736f2c73382777314f14aae8eab58155dc3c564b75b9eb6415d3c85fcb05dfbe2caf7ef6fe02bb902bf7a3e6a470a47def51234d4bdd61ddbb643fc003bc75da8e645174f5631c5e97bec0195f2dbf574d09da623e4a0fd8dce153a0c7fa6ed14d9a256844ea9e67a3b109977b753ec358d6855df49ea3d6f429ac3b49d5d739e010123043411fd6575e515c18168c0dd0cf137308f00c70940a75c930cb00d9e8c0ac42f15b14221e5c150737d970ff4ade2ebd46276acb1bf79e9702fe62237355f86ac683f748836a81fe277187a032bf3d83dd8b7d844c9bc2979caef150821930770e7bdfae21a3300eda22a2540f3b29b2e18e5c2ccd24d4a8c1f5bb2b54d3e0a9a92f33e657f188adf60fce57365aee2ef2fb80528c8367652a78dccf9959a2fd15f7b0c605f66cb37eecf62c00189f178a9d9b56000b0e8f9bb0f5e5a17c21f1736a7d8c1c5a371c63bb800085c33a44f9b921f117ef7de86fe44b9183c4208f8bd878fa49eb6e698534533a7e9b110cc4e86510723f24b73ac8ad917d1c02435504433d997300c7ca3059e42f442af7ec6916a025dfc1d4ba1e6f91376cba27cc106de8cf9a47c93a9bee4ad6497aa5f587d9d0d1f389ea526c1757ec828c01c4e4946bee7715389a02917eb3dc05029ac3b7dffe87296ddfcaaeb77e0d4b6e5d6d22d2e567f96c8ba635f69d29c1421a04e3510b3f0f6c7d6d7d4d415b709908d00ca2287f466094ca147c670625a9749866ab621e2bb73d507ce3c0d5aa752065d5173f2f3be763e96768251bf9535737757d6c90f78e6310e92360c1b68e37d89dbbc2faa5b135e1db6c3d44737f6fc1c836b4e9c0308d276b036fa236727c70fa7105c2c8589df14a27cdea0f9649773c9ede023b297f64f27fe9fd821f0f807881182615c927ef469cf2a0594e20c6e1fea1d9431474400ad84870c9105b08c7ae5ee5e921026965ac9b11cef871cbe94ada134b1fc3a96d2be50ba1cf8083ef7d81eb8af56f812f703e71e0809068cb98859aa26f0e613c718ec61c5853aa9a1f2e4fe341846bd88f869180445e59ddc6dd6b212a379c701ec7397cb29d2e36f1ad20364735fe6cc81b6008b6b0739b28a9b716495ef6ed97c25f60fc3d7be0fa05e41c5338c4f0bf92fe6977f0adfa11b2f1c6c8966539e971559307cf26d5a710ac9fd1b11564e85e9a74a81c93f55ae097a367a6f11d20301dee1c9e93b810283d97b6305b8ea15e4dd1396e0cc376f47d27e2d16ab0d37160d7259dfa4d32854"}, @INET_DIAG_REQ_BYTECODE={0x13, 0x1, "29889051cbcaad6789c16a5b18a2dc"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x1068}, 0x1, 0x0, 0x0, 0x4008}, 0x44) (async) bpf$ITER_CREATE(0x21, &(0x7f00000018c0)={r0}, 0x8) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x74, r6, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @random="95b79544b61d"}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @initial, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async) 06:33:09 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x1d, r1, 0x3}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@canfd={{}, 0x48, 0x0, 0x0, 0x0, "5a925582b3d351461202465b37986891e14329644fe570b63c1178fb832bc83942ad2a2a2922d89206cb04a541fbd52c4f4639c8edf88f8d89876c0d3599de92"}, 0x48}}, 0x0) 06:33:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000002000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="b0", 0x1}], 0x1}}], 0x1, 0x0) [ 1571.795869][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1571.804097][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! 06:33:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000002000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="b0", 0x1}], 0x1}}], 0x1, 0x0) [ 1574.438069][T32696] Bluetooth: hci3: command 0x0405 tx timeout 06:33:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fef00102e80e423c7", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@bridge_newneigh={0x24, 0x1c, 0xd105d1610db53515, 0x0, 0x0, {0x2, 0x0, 0x0, r3}, [@NDA_DST_IPV4={0x8}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@bridge_newneigh={0x24, 0x1c, 0xd105d1610db53235, 0x0, 0x0, {0x2, 0x0, 0x0, r3}, [@NDA_DST_IPV4={0x8}]}, 0x24}}, 0x0) 06:33:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xc4, r3, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x62}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_DATA={0x88, 0xc5, "ed1f7447c3212cae6f70ea952b17abf1f47df17a88ed8e9c268f8cdd2b34036d1942d4aaea97d746a6cbeab12348e8bf29487029c2ffb29327323c5d76370c1c722b0bf7df03c001adf6222f9eeaec496ba0dc07626ec84422642db14723f2ce507b09c5c8790769a70e06ef4f68b99eb894b3e71af0ea821d8a863fc44d3f20eeabe0a3"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}]}, 0xc4}, 0x1, 0x0, 0x0, 0x44015}, 0x0) r4 = accept(r0, &(0x7f00000006c0)=@nl, &(0x7f0000000740)=0x80) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000001880)={&(0x7f0000000780), 0xc, &(0x7f0000001840)={&(0x7f00000007c0)={0x1068, 0x13, 0x20, 0x70bd26, 0x25dfdbfd, {0x2f, 0xf5, 0x0, 0x4, {0x4e21, 0x4e20, [0x6, 0x7fffffff, 0x425, 0x3], [0x4, 0xffffffff, 0x10001, 0x212], 0x0, [0x8, 0x8]}, 0x7f, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "3e94a14656f3daa6d4065ef1d4da3d27e4a59f1dc750dadd788cfdc1821d085b2b14a8fe508108990ccf7e55c4ce5254290c15d431bab7ece957cb111a16e5d7e1cf18f9df890d642b8c60543d8a4cee038b7762478b9c5076949b4e1691d72b0ef7363cf2ccc0ffd7476b35cf4a8cb60fb48dd9e68fe993035af5c91b899766d563f6517539b2c00cf172e4d727c6f7d8a9e85e992447e6a131325138ba2283ea2bdc27a3714bd953f217fe706e8d3ee6100224978f96868dadbf7dae92ac869b0ddf08d7cf0d55e0b1574bb79fcefc6b221547b21b5c227b590cafff9c2e5614568ebd83c142675845dd8a983bf8cd45458c631bf8e43cfa0da99cf687493d4c1690554b95c831f63b8eb98f5d808b25300e2933e490013660e48926d8485769b84f8ab59e9781a8623d20096adc32a49b3d6bfe031530cc492cf58dd0ebc4803404f4d8f1bb65e30c866afc065f5077bdd67a67a7ce30c9583ea77730589d6a0d503fdc4ef4445f7c83ebb6cf2f8fc0c2df512cdc4fdd895e872f820f6b7a62f05703a8d1a637c81c20045db7d31bcf585f3df4166027cdf2f70f9391baa56bc495607316bf079c1fbd245b0ee4bff69cfdbe96c80b0c5c34c5e9798e9f410943fee7b611d9150f77c07a7201b82b49fbe8e95bc13ce033abb8728df09805d27ea89eb6c228d5bf89daa9caa117f5c0f079d19d81700a278da9e5b0d8e82a29455faf2bf941673eff2901dcb61f5370136c3797ee65c0058344cdd9969403243437205071153f3b63f5862095c884863d368c3aeb429129f4ac5b836d3d1b09999891e1099879d813cc67baddfe8d0d115f6e0e99770d5e718439fa93ae9ee418042c6d424ea336274a1282b5573d430a2a1790b62c6cd05c3e0508bf2b5aa468c130d335765cad08b34bfed563948777c589bd60be908f942d3a1a428fb4ebe8513ec6027b8cb42d473599df7fbe31e326ddeb0f67369b376ed3b5323af3b72cd9f08a56c7e353c76a95330644aff5961ce576a0a4dd6f0541dc030a678d8f3f4d5e230e8248d2a68f8f9a53e870aebadc42c3fda8c906f2db1363ec2401209c181c42e85bc3fd3f8c1a543e16ce3a2c69f63ec280ce14fe7cd793883dba60501b4406a54346715ccefb6da79200263a7bea3cac9491994712f4224eecddda14fbb94e7d539bd7067e44977c3b836196fdb489c645938681afc2ee041a4ba39d66ab04d6cb6d49ed2b14977a1fd4cef3423811fd4384041bb171eaca0cc0f59295dfb52838d5cf0e7d4770e5f1cff5e2d3bf33e86542a6d9fe401ce999e4c98b6c9d7b79c6a19c15fe2a417a930672c162b9e6943245e5f2d5be65f27deacb8123022ce054c6b31f2225a2e4c2fbb5967d05ccda345141daf7eda49f81a7a04d9ac4b71dd86cf990099e93d62537e6ef7d417483364f3bc9b5222055f95435441a4f59830444e9c417362248ac1b9e1e5aafe44ef4b7f8c32805a8f37f20113914200818d78f45d578efd84bb486b649397705428676f12acf5bec06ad657fcfd831ad6482541a74f0dc963944acce53e6983bbe877a2881eb2f1c7fa765c9c04529adca2d8492b0838b790e588b5f10d5fe996996d0f18dba04aa2b7e4408061392a9273d7ee7f9a1d107b34e92fe2c1ecfcbf8b961c97b6a01b5ae00fb688e73b5c8cc613e567241b91d1b76a7f528fa7a37f3872512214ef8bdf018781f76eed0fb3438696c30055774bc2fc0f5f699b3b9594d2523f1242ae4cd3f666476c6513a4336e159f426f5c20834081e65d7582575ad670127ca24e1238b101f382e4343f00fea7d83fe4f02a0142a375b22065fc0b9a07c5797cc685c3b6347770ee506ac31487f63585c0beda275b72d1e8ac0adf6479487b17bf940d844c603a75c86888b581d81ba6aafd5775c1f5b129c2f552e8946f58754c8ba3b6548e6702881968284bab49b3f6d334ee19132b784eb2d9842820f871614b6c9b9dc7a54dba3ddb0082dbf8928ac3d2ca47e84f1503f3db8d6c6faedc420f39029a7f9e66c4c1e94906748bf017ef03261916542fc7b0e60e8c0053530bd38661a455bd4fe510261d0123d35e573dcc4e76b61af00ce3fb93c841ea2ef22807d25538ad64fdbf12e1c33a039950fd69d35493735fa39a085dcbb583442de5cecfd948a0352d1eb164a7c00510c9f752afdd282f114d87635f4dd52416442808be0ac5b5d4fe6b4876cbf9f7d3ab12b58f0fac57cdbbf3afd72227651fcfb8c9542c251f2d5a8981aefd79e2545521f77bf3343451ce0bcd7c722d2a4dbc0a82aaca13aab6b1f349a184d5e2ba99c75d6d983a3955576764e7b47e2ba4433ed535f1ba552c09dc3bdde18fbff6062c83d7f0315f25a1e2953a232fd1b752e5aa2ab7457b69eb5c291d24ab7d783fe65a05e7c8d92212bd499bc115377dc812555fb22d78ef0c7a992f2994391ae3e16c4c52a1a596d68e8d3525ecd42e011f221cdee7ff458270bbda13526f0a9a370127b527259a1489552f8979da2ee4310d105c3bcedfec79bdfdb4efc11525d5503e1268e053a465911296ccbf90ffcb7ed4974c152ed4910dfa224e2aab520724180d6460e16a833d9aa5de4ca6108f192bc66c116b71ef61c5766496b13052f95b3a899a9184a56ff1b17a2c30768dd3097f76187880cefa7544a2122a77bd4d36207c4400b2cd8d51770e42b9406d7d81d5092899c01a7becddea03ec632d6620a8d3930126d930a5265ca76f9a03b0d0382aa7279e2aa827123ed68ca4ba5b7c20786f3e5f4e34bd8c7d10ba03e39cae945ecb613b8ad595371ad93e410cf06e72dda5b7a1e5fec1502205aa66507d0a0407ef5fd4a18f00111e7f6ef1e3e979f52dfd03496e0e1849b23eb109d3499ba7438dfa6c0dc26ba40579f20df7571626b06b9690c27849fe1842dcf8bc46f493dfa8c563da7292367a2b16cebc19f58ab23c2202c034c64c0c6d1cc369d97940aac95ea08d74f0d4b967ad938a526dbf49cbc5058a4d2d8af9b8b4a70f12d293eabec7b0460a17c1b68ae627c92da0319e87660ff41e484a68c85642707b47fbd651326c0b44495b6ed1edcbf5ec7d3e3cd6d49d6fe1ae1442f9d3a53c719245c800ed9ab8883e2f18b0fc81917fa4046c7c75236b971a444c8c82872755258fcb3f212198efc9837f37aa81514124d8cdb412d890729a0362cf1c7d1642f228d7f9af83ddc3e05100180bc6fa286d3b633d814279eba23ff2d5d2449c1e90bf6087e85f628b22b3b73a7e9753e92164806590b7a5999380eb73420453470933afaf680139f1a1de273326be54f8999639768f43f11f988f1a983c35f0d8e8ed8a07be92ceaa4828bb170753d4918ea07644edd7f5ad0e7abed85bdea09aaea97e19a83eb378021d5c0eee99f74d354b844e632d4158a0d471478aa1a6adc4fc56cd6c071dfe409665042a5d668878bc5cb7cbc5a9a5fa279804f27cd521a2e94fa858c3ff356802ab043a26ae87bc1be0599592faaa39a84b49378a649aff1a2ce50d342dd0ebcc5666f43fd45d75a1d3cbf1febeea56c7d62878180ee3263e0167743d448d5074174f3249d336fbd5bbe92088c482ea4cf86fb21f87ca5097e28acbabea90fde1067f7a8ca0183f091eaed726941017afd4713e6234027d803fe1a12b8d3ad0ae5a29c44f04c1c9d6e967415e0ffb41c3d3d199772b6f0ca175994b20d30120b6fe799a101f6ace16ea8d412ca0d6f40a576c10ea9d7038d22e70a0eb9a515103e4a0d64325b6c16f0504aa7ab6fd762a5029079ae0ebd114f459b23d9fe39f1aff981646bb9c38872878d03c3be43a5d0381d78436efd92385ab68494aaa7aa39f35a87ccf42d0eca514bdd3112cb051cb6fab4949712ba6daa809dbad027bf033316100b804dc9da192e4f152762b5494bcb964bb2c594bf31637fd330835c599c3e47df47c116304e5f4e42ef291937deaf46ebb658cb3d6a973d910f2a2030de4f1439f3bdecd0457be2742f4d54a6d8906a1d1c5a7fa484fd070165d9386d77ef28fb358db4b3452ba319e274e337d7696da81f6eaa1d088fb2f11e04c41ebef98839f989a6fdf06dbb51c8541238cc0ce362ea01a3e9ec2dca3a7c39aab34d5f374c3ced4b947cf2846852dd23c7726b5299a3efa610e7d05d47c58dbad5d86d75c938a821a9b73ada35d3862b9b32bce071fa489b28ee71b9ee6840cf5640ad5ac25c5804f7863835df64915298bfb1449077dec4f064d43615b133a0c60a9f9a2868ebcbfe53dd54b244de6fd47bdd307ae7cf1235b1d99f2ff931c8068bf1a2ffd33d8a5f3cedbd1932d3fddda8c30c99fa755611b5da9e41986f53ca7b80192f667816d0d6c3c7e835a9afd4c357f55ee8e45fbb2119bec082ec13ba151c8daff47677bc63a3e8f6a7d1569af5f96f162e996dca2b8800ebeee9b5582afb06a117dcc968b0111bfa20c2d44b1adff205df0207cfa9ab2b6561a665792f74d6e4e5db938dd75f970b3bf736f2c73382777314f14aae8eab58155dc3c564b75b9eb6415d3c85fcb05dfbe2caf7ef6fe02bb902bf7a3e6a470a47def51234d4bdd61ddbb643fc003bc75da8e645174f5631c5e97bec0195f2dbf574d09da623e4a0fd8dce153a0c7fa6ed14d9a256844ea9e67a3b109977b753ec358d6855df49ea3d6f429ac3b49d5d739e010123043411fd6575e515c18168c0dd0cf137308f00c70940a75c930cb00d9e8c0ac42f15b14221e5c150737d970ff4ade2ebd46276acb1bf79e9702fe62237355f86ac683f748836a81fe277187a032bf3d83dd8b7d844c9bc2979caef150821930770e7bdfae21a3300eda22a2540f3b29b2e18e5c2ccd24d4a8c1f5bb2b54d3e0a9a92f33e657f188adf60fce57365aee2ef2fb80528c8367652a78dccf9959a2fd15f7b0c605f66cb37eecf62c00189f178a9d9b56000b0e8f9bb0f5e5a17c21f1736a7d8c1c5a371c63bb800085c33a44f9b921f117ef7de86fe44b9183c4208f8bd878fa49eb6e698534533a7e9b110cc4e86510723f24b73ac8ad917d1c02435504433d997300c7ca3059e42f442af7ec6916a025dfc1d4ba1e6f91376cba27cc106de8cf9a47c93a9bee4ad6497aa5f587d9d0d1f389ea526c1757ec828c01c4e4946bee7715389a02917eb3dc05029ac3b7dffe87296ddfcaaeb77e0d4b6e5d6d22d2e567f96c8ba635f69d29c1421a04e3510b3f0f6c7d6d7d4d415b709908d00ca2287f466094ca147c670625a9749866ab621e2bb73d507ce3c0d5aa752065d5173f2f3be763e96768251bf9535737757d6c90f78e6310e92360c1b68e37d89dbbc2faa5b135e1db6c3d44737f6fc1c836b4e9c0308d276b036fa236727c70fa7105c2c8589df14a27cdea0f9649773c9ede023b297f64f27fe9fd821f0f807881182615c927ef469cf2a0594e20c6e1fea1d9431474400ad84870c9105b08c7ae5ee5e921026965ac9b11cef871cbe94ada134b1fc3a96d2be50ba1cf8083ef7d81eb8af56f812f703e71e0809068cb98859aa26f0e613c718ec61c5853aa9a1f2e4fe341846bd88f869180445e59ddc6dd6b212a379c701ec7397cb29d2e36f1ad20364735fe6cc81b6008b6b0739b28a9b716495ef6ed97c25f60fc3d7be0fa05e41c5338c4f0bf92fe6977f0adfa11b2f1c6c8966539e971559307cf26d5a710ac9fd1b11564e85e9a74a81c93f55ae097a367a6f11d20301dee1c9e93b810283d97b6305b8ea15e4dd1396e0cc376f47d27e2d16ab0d37160d7259dfa4d32854"}, @INET_DIAG_REQ_BYTECODE={0x13, 0x1, "29889051cbcaad6789c16a5b18a2dc"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x1068}, 0x1, 0x0, 0x0, 0x4008}, 0x44) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000018c0)={r0}, 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x74, r6, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @random="95b79544b61d"}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @initial, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xc4, r3, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x62}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_DATA={0x88, 0xc5, "ed1f7447c3212cae6f70ea952b17abf1f47df17a88ed8e9c268f8cdd2b34036d1942d4aaea97d746a6cbeab12348e8bf29487029c2ffb29327323c5d76370c1c722b0bf7df03c001adf6222f9eeaec496ba0dc07626ec84422642db14723f2ce507b09c5c8790769a70e06ef4f68b99eb894b3e71af0ea821d8a863fc44d3f20eeabe0a3"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}]}, 0xc4}, 0x1, 0x0, 0x0, 0x44015}, 0x0) (async) accept(r0, &(0x7f00000006c0)=@nl, &(0x7f0000000740)=0x80) (async) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000001880)={&(0x7f0000000780), 0xc, &(0x7f0000001840)={&(0x7f00000007c0)={0x1068, 0x13, 0x20, 0x70bd26, 0x25dfdbfd, {0x2f, 0xf5, 0x0, 0x4, {0x4e21, 0x4e20, [0x6, 0x7fffffff, 0x425, 0x3], [0x4, 0xffffffff, 0x10001, 0x212], 0x0, [0x8, 0x8]}, 0x7f, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x13, 0x1, "29889051cbcaad6789c16a5b18a2dc"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x1068}, 0x1, 0x0, 0x0, 0x4008}, 0x44) (async) bpf$ITER_CREATE(0x21, &(0x7f00000018c0)={r0}, 0x8) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x74, r6, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @random="95b79544b61d"}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @initial, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async) [ 1575.684704][T32698] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:33:14 executing program 3: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:33:15 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x1d, r1, 0x3}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@canfd={{}, 0x48, 0x0, 0x0, 0x0, "5a925582b3d351461202465b37986891e14329644fe570b63c1178fb832bc83942ad2a2a2922d89206cb04a541fbd52c4f4639c8edf88f8d89876c0d3599de92"}, 0x48}}, 0x0) 06:33:15 executing program 1: connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 06:33:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newrule={0x30, 0x20, 0x26326c36b9e27041, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_macvtap\x00'}]}, 0x30}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) bind$inet6(r2, &(0x7f0000f65000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000080)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 06:33:15 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r7}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r9}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r11, 0x6, 0x3, &(0x7f0000000040)=0xb6, 0x4) connect$bt_l2cap(r11, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 06:33:15 executing program 3: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:33:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket(0x2, 0x3, 0xc3) bind$netrom(r3, &(0x7f0000000000)={{0xa, @null={0x40, 0x40, 0xe0, 0x40, 0x40, 0x40, 0x74}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null]}, 0x48) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x1, 0x3}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:33:18 executing program 4: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:33:18 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='jbd2_handle_stats\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 06:33:19 executing program 1: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, 0x0}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) 06:33:19 executing program 3: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:33:20 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x2000000, 0x2000000}}}]}, 0x78}}, 0x0) [ 1582.122063][ T5097] Bluetooth: hci3: command 0x0405 tx timeout [ 1582.522318][T32739] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 06:33:21 executing program 4: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:33:21 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000)=0xfffffe00, 0x4) [ 1583.224245][T32739] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 06:33:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket(0x2, 0x3, 0xc3) bind$netrom(r3, &(0x7f0000000000)={{0xa, @null={0x40, 0x40, 0xe0, 0x40, 0x40, 0x40, 0x74}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null]}, 0x48) (async) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x1, 0x3}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async, rerun: 64) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async, rerun: 64) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async, rerun: 64) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:33:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000)=0xfffffe00, 0x4) 06:33:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000)=0xfffffe00, 0x4) 06:33:24 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x2000000, 0x2000000}}}]}, 0x78}}, 0x0) 06:33:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket(0x2, 0x3, 0xc3) (async) r3 = socket(0x2, 0x3, 0xc3) bind$netrom(r3, &(0x7f0000000000)={{0xa, @null={0x40, 0x40, 0xe0, 0x40, 0x40, 0x40, 0x74}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null]}, 0x48) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x1, 0x3}) (async) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x1, 0x3}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:33:24 executing program 3: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:33:25 executing program 4: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:33:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8934, &(0x7f0000000100)={'gre0\x00', 0x0}) 06:33:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000)=0xfffffe00, 0x4) [ 1588.219070][T32765] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1588.458109][ T302] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 06:33:27 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000001d000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 06:33:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r4 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendfile(r4, r1, 0x0, 0x10000a006) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="070000000300"/38]}) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x20, 0x100, 0x0, 0x0, 0x2, [0x2, 0xffffffff, 0x8, 0x7]}) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/133, 0x85}, {&(0x7f0000000400)=""/161, 0x7fffef7b}], 0x2, 0x0, 0xf0ffffff}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000500), r3) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getpid() sendmsg$nl_route_sched(r0, 0x0, 0x4000000) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 06:33:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, r5, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @random="92e05269aeffb39880a700"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x8c, r5, 0x300, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000040}, 0xa000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000010809110000000802110000001000000002000000"], 0x1e) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r8, @ANYBLOB="0a00060008021100000000002c002c800800000009000000080000000300000008"], 0x70}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x14, r6, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008801) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1590.684262][ T28] audit: type=1804 audit(1704695609.454:983): pid=309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir102709967/syzkaller.A4hqKL/1738/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 06:33:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="000086dd0500000000000000000060"], 0xfdef) 06:33:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r4 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendfile(r4, r1, 0x0, 0x10000a006) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="070000000300"/38]}) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x20, 0x100, 0x0, 0x0, 0x2, [0x2, 0xffffffff, 0x8, 0x7]}) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/133, 0x85}, {&(0x7f0000000400)=""/161, 0x7fffef7b}], 0x2, 0x0, 0xf0ffffff}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000500), r3) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getpid() sendmsg$nl_route_sched(r0, 0x0, 0x4000000) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 06:33:31 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x2000000, 0x2000000}}}]}, 0x78}}, 0x0) [ 1593.910795][ T28] audit: type=1804 audit(1704695612.664:984): pid=327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir102709967/syzkaller.A4hqKL/1739/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 06:33:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r4 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendfile(r4, r1, 0x0, 0x10000a006) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="070000000300"/38]}) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x20, 0x100, 0x0, 0x0, 0x2, [0x2, 0xffffffff, 0x8, 0x7]}) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/133, 0x85}, {&(0x7f0000000400)=""/161, 0x7fffef7b}], 0x2, 0x0, 0xf0ffffff}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000500), r3) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getpid() sendmsg$nl_route_sched(r0, 0x0, 0x4000000) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 06:33:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, r5, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @random="92e05269aeffb39880a700"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x8c, r5, 0x300, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000040}, 0xa000) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000010809110000000802110000001000000002000000"], 0x1e) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r8, @ANYBLOB="0a00060008021100000000002c002c800800000009000000080000000300000008"], 0x70}}, 0x0) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x14, r6, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008801) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:33:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r4 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendfile(r4, r1, 0x0, 0x10000a006) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="070000000300"/38]}) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x20, 0x100, 0x0, 0x0, 0x2, [0x2, 0xffffffff, 0x8, 0x7]}) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/133, 0x85}, {&(0x7f0000000400)=""/161, 0x7fffef7b}], 0x2, 0x0, 0xf0ffffff}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000500), r3) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getpid() sendmsg$nl_route_sched(r0, 0x0, 0x4000000) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 06:33:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r4 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendfile(r4, r1, 0x0, 0x10000a006) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="070000000300"/38]}) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x20, 0x100, 0x0, 0x0, 0x2, [0x2, 0xffffffff, 0x8, 0x7]}) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/133, 0x85}, {&(0x7f0000000400)=""/161, 0x7fffef7b}], 0x2, 0x0, 0xf0ffffff}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000500), r3) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getpid() sendmsg$nl_route_sched(r0, 0x0, 0x4000000) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) [ 1597.540719][ T329] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1597.561651][ T330] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 06:33:36 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r1, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r2, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0xfffffff7, 0x8}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r3, &(0x7f0000000000), 0x0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r4, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x1ff, 0x28}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xf, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcb85}, [@generic={0x80}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x401}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socketpair(0x2, 0x1, 0x0, &(0x7f0000000300)) 06:33:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r4 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendfile(r4, r1, 0x0, 0x10000a006) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="070000000300"/38]}) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x20, 0x100, 0x0, 0x0, 0x2, [0x2, 0xffffffff, 0x8, 0x7]}) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/133, 0x85}, {&(0x7f0000000400)=""/161, 0x7fffef7b}], 0x2, 0x0, 0xf0ffffff}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000500), r3) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getpid() sendmsg$nl_route_sched(r0, 0x0, 0x4000000) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) [ 1599.152159][ T28] audit: type=1804 audit(1704695617.914:985): pid=348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir102709967/syzkaller.A4hqKL/1740/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 06:33:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, r5, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @random="92e05269aeffb39880a700"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x8c, r5, 0x300, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000040}, 0xa000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000010809110000000802110000001000000002000000"], 0x1e) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r8, @ANYBLOB="0a00060008021100000000002c002c800800000009000000080000000300000008"], 0x70}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x14, r6, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008801) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, r5, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @random="92e05269aeffb39880a700"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x8c, r5, 0x300, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000040}, 0xa000) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000010809110000000802110000001000000002000000"], 0x1e) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r8, @ANYBLOB="0a00060008021100000000002c002c800800000009000000080000000300000008"], 0x70}}, 0x0) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x14, r6, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008801) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async) 06:33:38 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x2000000, 0x2000000}}}]}, 0x78}}, 0x0) 06:33:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r4 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendfile(r4, r1, 0x0, 0x10000a006) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="070000000300"/38]}) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x20, 0x100, 0x0, 0x0, 0x2, [0x2, 0xffffffff, 0x8, 0x7]}) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/133, 0x85}, {&(0x7f0000000400)=""/161, 0x7fffef7b}], 0x2, 0x0, 0xf0ffffff}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000500), r3) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getpid() sendmsg$nl_route_sched(r0, 0x0, 0x4000000) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 06:33:39 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r1, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r2, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0xfffffff7, 0x8}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r3, &(0x7f0000000000), 0x0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r4, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x1ff, 0x28}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xf, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcb85}, [@generic={0x80}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x401}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socketpair(0x2, 0x1, 0x0, &(0x7f0000000300)) [ 1600.931848][ T28] audit: type=1804 audit(1704695619.554:986): pid=353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3930108561/syzkaller.BqTn8d/1702/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 1601.961065][ T28] audit: type=1804 audit(1704695620.644:987): pid=360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1257489627/syzkaller.DQKjpI/907/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 1602.006484][ T364] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 06:33:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r4 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendfile(r4, r1, 0x0, 0x10000a006) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="070000000300"/38]}) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x20, 0x100, 0x0, 0x0, 0x2, [0x2, 0xffffffff, 0x8, 0x7]}) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/133, 0x85}, {&(0x7f0000000400)=""/161, 0x7fffef7b}], 0x2, 0x0, 0xf0ffffff}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000500), r3) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getpid() sendmsg$nl_route_sched(r0, 0x0, 0x4000000) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) [ 1602.604663][ T369] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 06:33:41 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r1, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r2, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0xfffffff7, 0x8}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r3, &(0x7f0000000000), 0x0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r4, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x1ff, 0x28}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xf, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcb85}, [@generic={0x80}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x401}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socketpair(0x2, 0x1, 0x0, &(0x7f0000000300)) 06:33:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:33:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r4 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendfile(r4, r1, 0x0, 0x10000a006) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="070000000300"/38]}) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x20, 0x100, 0x0, 0x0, 0x2, [0x2, 0xffffffff, 0x8, 0x7]}) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/133, 0x85}, {&(0x7f0000000400)=""/161, 0x7fffef7b}], 0x2, 0x0, 0xf0ffffff}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000500), r3) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getpid() sendmsg$nl_route_sched(r0, 0x0, 0x4000000) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 06:33:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r4 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendfile(r4, r1, 0x0, 0x10000a006) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="070000000300"/38]}) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x20, 0x100, 0x0, 0x0, 0x2, [0x2, 0xffffffff, 0x8, 0x7]}) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/133, 0x85}, {&(0x7f0000000400)=""/161, 0x7fffef7b}], 0x2, 0x0, 0xf0ffffff}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000500), r3) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getpid() sendmsg$nl_route_sched(r0, 0x0, 0x4000000) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) [ 1604.370445][ T28] audit: type=1804 audit(1704695623.154:988): pid=376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir102709967/syzkaller.A4hqKL/1741/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 1605.221699][ T28] audit: type=1804 audit(1704695623.924:989): pid=385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3930108561/syzkaller.BqTn8d/1703/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 06:33:44 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r1, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r2, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0xfffffff7, 0x8}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r3, &(0x7f0000000000), 0x0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r4, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x1ff, 0x28}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xf, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcb85}, [@generic={0x80}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x401}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socketpair(0x2, 0x1, 0x0, &(0x7f0000000300)) [ 1607.288606][ T28] audit: type=1804 audit(1704695623.944:990): pid=383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1257489627/syzkaller.DQKjpI/908/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 06:33:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 06:33:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1610.004255][ T395] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 06:33:49 executing program 3: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x9, 0x9, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0xaa, 0x1, 0x0, 0x5a, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x40, 0x6dea, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000009c0)={0x20c, r2, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x1ac, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x40, 0x8, 0x22, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x10, 0x700, 0x0, 0x4}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x0, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x2f, 0x1a, 0x9, 0x9, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x0, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) syz_genetlink_get_family_id$team(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', r5, 0x29, 0x0, 0x1, 0x0, 0x5a, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x40, 0x6dea, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl1\x00', r7, 0x2f, 0x0, 0x81, 0x0, 0x0, @local, @private2, 0x40, 0x80, 0x1000, 0x401}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000030c0)=ANY=[@ANYBLOB="040300", @ANYBLOB="00002cbd70008f3bb0e202000000080001002829b377754491892de0c41dc4a632e9ccb16abc9d06fee6a94d3f2c9d2daf94599f", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="3c00010024000100757365725f6c696e6b75", @ANYRES32=r6, @ANYBLOB, @ANYRES32=r8, @ANYRES32, @ANYBLOB="7800028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400000000003c000100240001006c625f74785f6d6574686f6400000000000000000000000000000000000000000500030005000000090004006861736800000000"], 0x304}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) 06:33:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r1) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, r2, 0x1}, 0x14}}, 0x0) 06:33:49 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, 0x0, &(0x7f00000000c0)) 06:33:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e030600c9d02c378ae945"], 0x7010) 06:33:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) 06:33:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:33:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r1) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, r2, 0x1}, 0x14}}, 0x0) [ 1612.787450][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.796708][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 06:33:52 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) [ 1613.915418][ T396] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 06:33:53 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001380)="f9d4545b4991", 0x6}, {&(0x7f0000001440)="5fde9c3826ecadc943659f033647ef87320cef022175b3c5af70", 0x1a}], 0x2}}], 0x1, 0x0) 06:33:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 06:33:54 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x23}, @exit], &(0x7f0000000180)='GPL\x00', 0x2, 0xe9, &(0x7f0000000240)=""/233, 0x0, 0x11}, 0x80) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 06:33:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r1) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, r2, 0x1}, 0x14}}, 0x0) 06:33:54 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 06:33:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x3, 0xc3) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)={0x174, r2, 0x405, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x89, 0x5b, "c5acef85a9f7e6581a43be08fbdcd3dac4b866942b0617c1d42549411b42565227bca6bac2b899b6ed81bc971487bd41a063b66c26d596a75a7572176de18e5070263cb5ee57c7f4d2f8c867fe62c0fe610ebd2b6cbe7e57c74637fc634d4b7c5adaa6e63d365918da480ca4ff61043d3aa773a0189d44268d7e024d5660dd7df8a59bdd31"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfffd}, @NL80211_ATTR_FRAME_MATCH={0xb9, 0x5b, "5fb30afc688918be50730976445203b1ce1748eeeced21bc65b15b5ec88639cc03aeb1388c352594774b5e651d731c87928845025b35bcf85ed88dcb57d8d6370f4013a367a403a0efb10d659bb57b74a3e0317e1c1e208c3efe543039d16475afe086f3e77bedadbde580d93c31affe32e475ecc08a57516b9b5a8b2d2508d144e7e4d351bf2841edddc62e459efc7dddda58e3a6c4608ea70eb8275ce2b0c97065d4cf7730982ebe22e6837a7c097233a7ad817f"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}]}, 0x174}, 0x1, 0x0, 0x0, 0x1080}, 0x20008040) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$nl_generic(r3, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x1fc, 0x23, 0x100, 0x70bd28, 0x25dfdbff, {0xb}, [@typed={0x4, 0x53}, @nested={0xf7, 0x33, 0x0, 0x1, [@typed={0x8, 0x5b, 0x0, 0x0, @pid=r4}, @generic="abd69214fad1281c883a1c012debd6c08a4929c344b1e65bda324022e6b536680fe1cdf3b83265cf982ae81569f1f898b8208f03dbd7903130a10289c2ef5b3d4befdd498089dbfdcacddabb213244d8bdd85a9b7acfe12ab9268dd1e6d31fa4a4b5475382c47a7378bc311f72eb6ed765a4eefccdb820", @generic="774d2d211e827c36b32e94884080bc63e5dbfabbbf1ea58aaae91bca", @generic="3230ba4eb99074aa0eb4791b9b7d2e82cdb1b5d43b8bd58fff458908c9f008ab8c0c5506259f47e83b7c2fde3f8710fcdfff0a40449d19aaa366465066241f5f098bd201b7251791c833fb23eab45e912a2737b832263b49"]}, @typed={0xc, 0x3b, 0x0, 0x0, @u64=0x4}, @typed={0x4, 0x6f}, @generic="261b20cf9a484ce453c270f62875f9d59fd8937fa243c05f8e7bb253ef0505857e1fdbc07e65315604aa5b1e28a7fed03963c9e899c4033cee32462d82f393dac31bab6d8da557742498c87ed5888d66da8e173fa883406d3ff8678fdeb919c38d72ef4e9e03a2119f785441645c1ddfb0f3cce632f1d12e69f1a4d4c78dea5623af9d9fa00b37c64cde1c96bb77aba0fe8bffedb4219ee7349d49ab7fee06ee15ac1b4a0518cbfe5e95ca2aa74eadf37ec719a81ab49db69c5d549fc4433ac30a1d4f602e8ec41e0268fe504252eb2f59c341", @typed={0x8, 0x74, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000080}, 0xc000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000a40)) [ 1617.238425][ T434] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 06:33:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001380)="f9d4545b4991", 0x6}, {&(0x7f0000001440)="5fde9c3826ecadc943659f033647ef87320cef022175b3c5af70", 0x1a}], 0x2}}], 0x1, 0x0) 06:33:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000280), 0x20000000}, 0x20) recvmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/136, 0x88}], 0x1}}], 0x2, 0x40012163, 0x0) 06:33:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r1) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, r2, 0x1}, 0x14}}, 0x0) 06:33:57 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 06:33:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001380)="f9d4545b4991", 0x6}, {&(0x7f0000001440)="5fde9c3826ecadc943659f033647ef87320cef022175b3c5af70", 0x1a}], 0x2}}], 0x1, 0x0) 06:34:00 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000280), 0x20000000}, 0x20) recvmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/136, 0x88}], 0x1}}], 0x2, 0x40012163, 0x0) [ 1621.942770][ T440] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 06:34:01 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 06:34:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 06:34:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001380)="f9d4545b4991", 0x6}, {&(0x7f0000001440)="5fde9c3826ecadc943659f033647ef87320cef022175b3c5af70", 0x1a}], 0x2}}], 0x1, 0x0) 06:34:01 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x3, 0xc3) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)={0x174, r2, 0x405, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x89, 0x5b, "c5acef85a9f7e6581a43be08fbdcd3dac4b866942b0617c1d42549411b42565227bca6bac2b899b6ed81bc971487bd41a063b66c26d596a75a7572176de18e5070263cb5ee57c7f4d2f8c867fe62c0fe610ebd2b6cbe7e57c74637fc634d4b7c5adaa6e63d365918da480ca4ff61043d3aa773a0189d44268d7e024d5660dd7df8a59bdd31"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfffd}, @NL80211_ATTR_FRAME_MATCH={0xb9, 0x5b, "5fb30afc688918be50730976445203b1ce1748eeeced21bc65b15b5ec88639cc03aeb1388c352594774b5e651d731c87928845025b35bcf85ed88dcb57d8d6370f4013a367a403a0efb10d659bb57b74a3e0317e1c1e208c3efe543039d16475afe086f3e77bedadbde580d93c31affe32e475ecc08a57516b9b5a8b2d2508d144e7e4d351bf2841edddc62e459efc7dddda58e3a6c4608ea70eb8275ce2b0c97065d4cf7730982ebe22e6837a7c097233a7ad817f"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}]}, 0x174}, 0x1, 0x0, 0x0, 0x1080}, 0x20008040) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)={0x174, r2, 0x405, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x89, 0x5b, "c5acef85a9f7e6581a43be08fbdcd3dac4b866942b0617c1d42549411b42565227bca6bac2b899b6ed81bc971487bd41a063b66c26d596a75a7572176de18e5070263cb5ee57c7f4d2f8c867fe62c0fe610ebd2b6cbe7e57c74637fc634d4b7c5adaa6e63d365918da480ca4ff61043d3aa773a0189d44268d7e024d5660dd7df8a59bdd31"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfffd}, @NL80211_ATTR_FRAME_MATCH={0xb9, 0x5b, "5fb30afc688918be50730976445203b1ce1748eeeced21bc65b15b5ec88639cc03aeb1388c352594774b5e651d731c87928845025b35bcf85ed88dcb57d8d6370f4013a367a403a0efb10d659bb57b74a3e0317e1c1e208c3efe543039d16475afe086f3e77bedadbde580d93c31affe32e475ecc08a57516b9b5a8b2d2508d144e7e4d351bf2841edddc62e459efc7dddda58e3a6c4608ea70eb8275ce2b0c97065d4cf7730982ebe22e6837a7c097233a7ad817f"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}]}, 0x174}, 0x1, 0x0, 0x0, 0x1080}, 0x20008040) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$nl_generic(r3, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x1fc, 0x23, 0x100, 0x70bd28, 0x25dfdbff, {0xb}, [@typed={0x4, 0x53}, @nested={0xf7, 0x33, 0x0, 0x1, [@typed={0x8, 0x5b, 0x0, 0x0, @pid=r4}, @generic="abd69214fad1281c883a1c012debd6c08a4929c344b1e65bda324022e6b536680fe1cdf3b83265cf982ae81569f1f898b8208f03dbd7903130a10289c2ef5b3d4befdd498089dbfdcacddabb213244d8bdd85a9b7acfe12ab9268dd1e6d31fa4a4b5475382c47a7378bc311f72eb6ed765a4eefccdb820", @generic="774d2d211e827c36b32e94884080bc63e5dbfabbbf1ea58aaae91bca", @generic="3230ba4eb99074aa0eb4791b9b7d2e82cdb1b5d43b8bd58fff458908c9f008ab8c0c5506259f47e83b7c2fde3f8710fcdfff0a40449d19aaa366465066241f5f098bd201b7251791c833fb23eab45e912a2737b832263b49"]}, @typed={0xc, 0x3b, 0x0, 0x0, @u64=0x4}, @typed={0x4, 0x6f}, @generic="261b20cf9a484ce453c270f62875f9d59fd8937fa243c05f8e7bb253ef0505857e1fdbc07e65315604aa5b1e28a7fed03963c9e899c4033cee32462d82f393dac31bab6d8da557742498c87ed5888d66da8e173fa883406d3ff8678fdeb919c38d72ef4e9e03a2119f785441645c1ddfb0f3cce632f1d12e69f1a4d4c78dea5623af9d9fa00b37c64cde1c96bb77aba0fe8bffedb4219ee7349d49ab7fee06ee15ac1b4a0518cbfe5e95ca2aa74eadf37ec719a81ab49db69c5d549fc4433ac30a1d4f602e8ec41e0268fe504252eb2f59c341", @typed={0x8, 0x74, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000080}, 0xc000) (async) sendmsg$nl_generic(r3, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x1fc, 0x23, 0x100, 0x70bd28, 0x25dfdbff, {0xb}, [@typed={0x4, 0x53}, @nested={0xf7, 0x33, 0x0, 0x1, [@typed={0x8, 0x5b, 0x0, 0x0, @pid=r4}, @generic="abd69214fad1281c883a1c012debd6c08a4929c344b1e65bda324022e6b536680fe1cdf3b83265cf982ae81569f1f898b8208f03dbd7903130a10289c2ef5b3d4befdd498089dbfdcacddabb213244d8bdd85a9b7acfe12ab9268dd1e6d31fa4a4b5475382c47a7378bc311f72eb6ed765a4eefccdb820", @generic="774d2d211e827c36b32e94884080bc63e5dbfabbbf1ea58aaae91bca", @generic="3230ba4eb99074aa0eb4791b9b7d2e82cdb1b5d43b8bd58fff458908c9f008ab8c0c5506259f47e83b7c2fde3f8710fcdfff0a40449d19aaa366465066241f5f098bd201b7251791c833fb23eab45e912a2737b832263b49"]}, @typed={0xc, 0x3b, 0x0, 0x0, @u64=0x4}, @typed={0x4, 0x6f}, @generic="261b20cf9a484ce453c270f62875f9d59fd8937fa243c05f8e7bb253ef0505857e1fdbc07e65315604aa5b1e28a7fed03963c9e899c4033cee32462d82f393dac31bab6d8da557742498c87ed5888d66da8e173fa883406d3ff8678fdeb919c38d72ef4e9e03a2119f785441645c1ddfb0f3cce632f1d12e69f1a4d4c78dea5623af9d9fa00b37c64cde1c96bb77aba0fe8bffedb4219ee7349d49ab7fee06ee15ac1b4a0518cbfe5e95ca2aa74eadf37ec719a81ab49db69c5d549fc4433ac30a1d4f602e8ec41e0268fe504252eb2f59c341", @typed={0x8, 0x74, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000080}, 0xc000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000a40)) 06:34:02 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@empty, @loopback}, 0x10) 06:34:03 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000280), 0x20000000}, 0x20) recvmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/136, 0x88}], 0x1}}], 0x2, 0x40012163, 0x0) [ 1625.023583][ T468] dvmrp0: left allmulticast mode 06:34:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000280), 0x20000000}, 0x20) recvmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/136, 0x88}], 0x1}}], 0x2, 0x40012163, 0x0) 06:34:04 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001b00000000000000b296ffff850000002a00000095000000000000003af1f53778422dccc1c382ce1b03e2cd30a568baa62f65a7f240c9c9444f020976"], 0x0}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) pipe(&(0x7f00000002c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xd5, 0x0, r0, 0x7fff, '\x00', 0x0, r0, 0x0, 0x5, 0x2}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006, 0x17800}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0xfffffffffffffd3b) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@local, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7, 0x36, 0x3d31, 0x100, 0x9, 0x0, r3}) openat$cgroup_ro(r0, &(0x7f0000000680)='cgroup.freeze\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004001}, 0x8001) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x3f, 0x6e, 0x400, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000580), 0x5ac, r5}, 0x38) 06:34:06 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="2a947354495ee7d43ace6e0880fbf78e993afbfe90a44de4a12b00484f9f26", 0x1f}, {&(0x7f0000000200)="b350d8a459dc6b65dfaa287643d5b1027adfe9647a77c6f4f115dc6063f7e73a82768ebea104788e997d0d02a5440e124bdf947c3bdf64940eeaacdf8f7fbabfe6303126baeb8979bfdb39fe549c3b2c5d23dbd3944d5660351239d1f40b3ebfa64d4008ef85c5fc0efa85f02318454896328bcbb882", 0x76}, {&(0x7f00000002c0)="3cd723b82355ed9f78cda5c2bf7ee6b9e733a0427ae2272c0729a2e9e28b2beae4b862c9ac320d4151dcd3cae35dd398", 0x30}], 0x3}}], 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)="55f93c13ccb266a4fb15031e63a79d965b357fe4254e327eaa7ef45286316520aa0627f2e0ccee0490f94f2f6595587357d52e313b75cacd335fcdc26644ddb28094192dcda1db067e5ff3e4cf686c42c3174f2c7a2c62036282d51996df005abc", 0x61}, {&(0x7f0000000700)="b11c45c4c430b3e9172a6ea20f926c73439056177c7fbd2b6a0f5e685c99b8ce95bcc66970e52c903fd49052634bad537a538ae1cc7f4ff744d6c60108e6bf57beae39d643b5a22130707a28860d2d2dc83af2740201717551181e57981fbf85f675f4a4a9523aa9bb72b961cecdcdd9eceae511c3e48410ec4fc42fd9c0f7dee0cc2bc0c049294aaa80053d02177ef02f63f26d7d7e60ec6b41bce40c947bc396cfad41c37091694effc40ec7a35a50a8ae2aae3cc506c87325030eae499675f014c73449c59723d2cbee039815b94051ee969b4cfbf859df1bf5660b22", 0xde}, {&(0x7f0000000840)="4bc87329165d99872cbc7a47", 0xc}], 0x3}}], 0x2, 0x40c0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 06:34:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x3, 0xc3) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) (rerun: 32) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)={0x174, r2, 0x405, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x89, 0x5b, "c5acef85a9f7e6581a43be08fbdcd3dac4b866942b0617c1d42549411b42565227bca6bac2b899b6ed81bc971487bd41a063b66c26d596a75a7572176de18e5070263cb5ee57c7f4d2f8c867fe62c0fe610ebd2b6cbe7e57c74637fc634d4b7c5adaa6e63d365918da480ca4ff61043d3aa773a0189d44268d7e024d5660dd7df8a59bdd31"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfffd}, @NL80211_ATTR_FRAME_MATCH={0xb9, 0x5b, "5fb30afc688918be50730976445203b1ce1748eeeced21bc65b15b5ec88639cc03aeb1388c352594774b5e651d731c87928845025b35bcf85ed88dcb57d8d6370f4013a367a403a0efb10d659bb57b74a3e0317e1c1e208c3efe543039d16475afe086f3e77bedadbde580d93c31affe32e475ecc08a57516b9b5a8b2d2508d144e7e4d351bf2841edddc62e459efc7dddda58e3a6c4608ea70eb8275ce2b0c97065d4cf7730982ebe22e6837a7c097233a7ad817f"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}]}, 0x174}, 0x1, 0x0, 0x0, 0x1080}, 0x20008040) (async, rerun: 64) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r4 = gettid() sendmsg$nl_generic(r3, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x1fc, 0x23, 0x100, 0x70bd28, 0x25dfdbff, {0xb}, [@typed={0x4, 0x53}, @nested={0xf7, 0x33, 0x0, 0x1, [@typed={0x8, 0x5b, 0x0, 0x0, @pid=r4}, @generic="abd69214fad1281c883a1c012debd6c08a4929c344b1e65bda324022e6b536680fe1cdf3b83265cf982ae81569f1f898b8208f03dbd7903130a10289c2ef5b3d4befdd498089dbfdcacddabb213244d8bdd85a9b7acfe12ab9268dd1e6d31fa4a4b5475382c47a7378bc311f72eb6ed765a4eefccdb820", @generic="774d2d211e827c36b32e94884080bc63e5dbfabbbf1ea58aaae91bca", @generic="3230ba4eb99074aa0eb4791b9b7d2e82cdb1b5d43b8bd58fff458908c9f008ab8c0c5506259f47e83b7c2fde3f8710fcdfff0a40449d19aaa366465066241f5f098bd201b7251791c833fb23eab45e912a2737b832263b49"]}, @typed={0xc, 0x3b, 0x0, 0x0, @u64=0x4}, @typed={0x4, 0x6f}, @generic="261b20cf9a484ce453c270f62875f9d59fd8937fa243c05f8e7bb253ef0505857e1fdbc07e65315604aa5b1e28a7fed03963c9e899c4033cee32462d82f393dac31bab6d8da557742498c87ed5888d66da8e173fa883406d3ff8678fdeb919c38d72ef4e9e03a2119f785441645c1ddfb0f3cce632f1d12e69f1a4d4c78dea5623af9d9fa00b37c64cde1c96bb77aba0fe8bffedb4219ee7349d49ab7fee06ee15ac1b4a0518cbfe5e95ca2aa74eadf37ec719a81ab49db69c5d549fc4433ac30a1d4f602e8ec41e0268fe504252eb2f59c341", @typed={0x8, 0x74, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000080}, 0xc000) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000a40)) 06:34:07 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x0, 0x2}, [@nested={0x9, 0x0, 0x0, 0x1, [@generic="0ee54338f9"]}]}, 0x20}}, 0x0) 06:34:07 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="2a947354495ee7d43ace6e0880fbf78e993afbfe90a44de4a12b00484f9f26", 0x1f}, {&(0x7f0000000200)="b350d8a459dc6b65dfaa287643d5b1027adfe9647a77c6f4f115dc6063f7e73a82768ebea104788e997d0d02a5440e124bdf947c3bdf64940eeaacdf8f7fbabfe6303126baeb8979bfdb39fe549c3b2c5d23dbd3944d5660351239d1f40b3ebfa64d4008ef85c5fc0efa85f02318454896328bcbb882", 0x76}, {&(0x7f00000002c0)="3cd723b82355ed9f78cda5c2bf7ee6b9e733a0427ae2272c0729a2e9e28b2beae4b862c9ac320d4151dcd3cae35dd398", 0x30}], 0x3}}], 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)="55f93c13ccb266a4fb15031e63a79d965b357fe4254e327eaa7ef45286316520aa0627f2e0ccee0490f94f2f6595587357d52e313b75cacd335fcdc26644ddb28094192dcda1db067e5ff3e4cf686c42c3174f2c7a2c62036282d51996df005abc", 0x61}, {&(0x7f0000000700)="b11c45c4c430b3e9172a6ea20f926c73439056177c7fbd2b6a0f5e685c99b8ce95bcc66970e52c903fd49052634bad537a538ae1cc7f4ff744d6c60108e6bf57beae39d643b5a22130707a28860d2d2dc83af2740201717551181e57981fbf85f675f4a4a9523aa9bb72b961cecdcdd9eceae511c3e48410ec4fc42fd9c0f7dee0cc2bc0c049294aaa80053d02177ef02f63f26d7d7e60ec6b41bce40c947bc396cfad41c37091694effc40ec7a35a50a8ae2aae3cc506c87325030eae499675f014c73449c59723d2cbee039815b94051ee969b4cfbf859df1bf5660b22", 0xde}, {&(0x7f0000000840)="4bc87329165d99872cbc7a47", 0xc}], 0x3}}], 0x2, 0x40c0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 06:34:08 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001b00000000000000b296ffff850000002a00000095000000000000003af1f53778422dccc1c382ce1b03e2cd30a568baa62f65a7f240c9c9444f020976"], 0x0}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) pipe(&(0x7f00000002c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xd5, 0x0, r0, 0x7fff, '\x00', 0x0, r0, 0x0, 0x5, 0x2}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006, 0x17800}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0xfffffffffffffd3b) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@local, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7, 0x36, 0x3d31, 0x100, 0x9, 0x0, r3}) openat$cgroup_ro(r0, &(0x7f0000000680)='cgroup.freeze\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004001}, 0x8001) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x3f, 0x6e, 0x400, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000580), 0x5ac, r5}, 0x38) [ 1632.832161][ T473] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1634.641959][ T476] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 06:34:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 06:34:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000b8af000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=@data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x7}, @device_b, @device_a, @broadcast, {0x6, 0x4}}, {0xa, 0x0, 0x3, 0x0, 0x63}}, {@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1}, {0x1}, @device_b, @initial, @from_mac=@device_b, {0x1, 0x7}}, {0x9, 0x0, 0x2, 0x1, 0x9a}}}, @ver_80211n={0x0, 0x13bc, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0x7b, "ad315f43f6ef512a73b3ae17fb3eeb0ef423aafbde4f613ab531890c084c6e19264fca5e1bc0553519349a026e29c26a50edc4262f08b807092541bc6fc0b1b4c32a5e741368e0deabb20926fb34102e91dc955124bef3975cc47f25d671017a57a4c7eeb3cb1705c54239a29613296438324efec37b1936da21ed"}, {@device_b, @broadcast, 0x75, "baffd781dbac3e014e3f5fb186baed2e82b3e6c2c274aabf0fd9134092e8c72a7a100d13715e2e6726672a3504f4056b108d9acdbf357f1bdbdf7fe9f0382381195d4b690f3d8608159c88204d8ecb500bf8c6830d05e925dacac99de0314db66e4df9e558049165a1322adad1e16db7185a34fa3e"}, {@device_a, @device_b, 0xb, "3fc3fff75af1b71a3bf32c"}, {@broadcast, @device_b, 0x4a, "05f705e28397b9217291eeeb04a77986566377886113ba8524bbd8b90136e4b5323afb3faff9ef9975e7cdeb7414637447fdaf00de8b4a9671c4116059aafb287aa3797b299abecac505"}, {@device_a, @device_a, 0xb4, "d6e609eb9078533ab11cf5a65ef51dd3c169fba5f6fd493edcd39d52a5b59774256312c20b9d0b911e60f762f4f6cc2330ba6b24f0c88ef8e49c31aff2163dfe16648efd5d689c7182b730d743b11c96c7cb9597e7fee6b2edef1c6d784cfa2bcc05ebcb7237a6e2436f011a8496e24320c8bcb3c7df688a9941dde8849f9a47736416542bc68d259115115589d16e4c3dff4e5904b3d21f289eed480cb65b0d85734fa4979a3a96c595edbc91eb8d0e18b6bd1f"}, {@device_b, @device_a, 0x1000, "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"}, {@device_b, @device_b, 0x94, "691ff3bdbef376f7712d8810d73aa10d15280c13ef5e4b815c65bf29c850fd8b83d23bdddc30d81ab6226d90579f00b37d10acd9b8342744e17e59b405f64ad93c64ca658e752899b50179fde5a3f7dc9fca1b80706f8e0f28941d427846fc5e4d86fc060307325da1ce84ada329a4d1aabc3f679b327c3e49f6d847d93b1fbf186203906bbd300fa04bd0ca61e1a33680909c75"}, {@device_b, @device_a, 0x22, "564f7ba4beef4823a17ae394a24a6e484682f66f6a6cf95893d4c9b10e0043df1e65"}, {@broadcast, @device_b, 0x7d, "bd88f548bc2ab6d79459b02f504b9e4262c6e8e4e345a5409bc1a999b87d66da3a5aec0af9b89d90b2ad68fe912f9d07bd72546871336417e1ad02cdf27ddf1f089a2ee0a69ec2dbaf02492f84ee3aca8e5ed966c5b9036f718a1751834d855aad8bd191bb987fd777d2520da5ef865a72cf0c03973ee7f55cd7a2c191"}]}, 0x13f6) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r4 = socket(0x2, 0x3, 0xc3) bind$netrom(r4, &(0x7f0000000000)={{0xa, @null={0x40, 0x40, 0xe0, 0x40, 0x40, 0x40, 0x74}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null]}, 0x48) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x50}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f00000019c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x28, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4f19f323b67ca47d) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x2, &(0x7f0000000400)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000001a00)=ANY=[@ANYBLOB="9d0000000802110000000002110000000802110000001000000002000000f3ce22539efde4a6a2c559cd71206704b67462c2840fa3d1f318247a5679da0b47281218c303c7b011ec2982f0c1c57ed01946db735b29336fcfec9ce5e2804b26b69d8bdbdc711d3c551879a360afa2c6ebef65dcaad53d7b1000000000000000"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x8001, 0x1, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:34:13 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001b00000000000000b296ffff850000002a00000095000000000000003af1f53778422dccc1c382ce1b03e2cd30a568baa62f65a7f240c9c9444f020976"], 0x0}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) pipe(&(0x7f00000002c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xd5, 0x0, r0, 0x7fff, '\x00', 0x0, r0, 0x0, 0x5, 0x2}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006, 0x17800}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0xfffffffffffffd3b) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@local, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7, 0x36, 0x3d31, 0x100, 0x9, 0x0, r3}) openat$cgroup_ro(r0, &(0x7f0000000680)='cgroup.freeze\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004001}, 0x8001) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x3f, 0x6e, 0x400, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000580), 0x5ac, r5}, 0x38) 06:34:13 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="2a947354495ee7d43ace6e0880fbf78e993afbfe90a44de4a12b00484f9f26", 0x1f}, {&(0x7f0000000200)="b350d8a459dc6b65dfaa287643d5b1027adfe9647a77c6f4f115dc6063f7e73a82768ebea104788e997d0d02a5440e124bdf947c3bdf64940eeaacdf8f7fbabfe6303126baeb8979bfdb39fe549c3b2c5d23dbd3944d5660351239d1f40b3ebfa64d4008ef85c5fc0efa85f02318454896328bcbb882", 0x76}, {&(0x7f00000002c0)="3cd723b82355ed9f78cda5c2bf7ee6b9e733a0427ae2272c0729a2e9e28b2beae4b862c9ac320d4151dcd3cae35dd398", 0x30}], 0x3}}], 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)="55f93c13ccb266a4fb15031e63a79d965b357fe4254e327eaa7ef45286316520aa0627f2e0ccee0490f94f2f6595587357d52e313b75cacd335fcdc26644ddb28094192dcda1db067e5ff3e4cf686c42c3174f2c7a2c62036282d51996df005abc", 0x61}, {&(0x7f0000000700)="b11c45c4c430b3e9172a6ea20f926c73439056177c7fbd2b6a0f5e685c99b8ce95bcc66970e52c903fd49052634bad537a538ae1cc7f4ff744d6c60108e6bf57beae39d643b5a22130707a28860d2d2dc83af2740201717551181e57981fbf85f675f4a4a9523aa9bb72b961cecdcdd9eceae511c3e48410ec4fc42fd9c0f7dee0cc2bc0c049294aaa80053d02177ef02f63f26d7d7e60ec6b41bce40c947bc396cfad41c37091694effc40ec7a35a50a8ae2aae3cc506c87325030eae499675f014c73449c59723d2cbee039815b94051ee969b4cfbf859df1bf5660b22", 0xde}, {&(0x7f0000000840)="4bc87329165d99872cbc7a47", 0xc}], 0x3}}], 0x2, 0x40c0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 06:34:13 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@empty, @loopback}, 0x10) 06:34:13 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001b00000000000000b296ffff850000002a00000095000000000000003af1f53778422dccc1c382ce1b03e2cd30a568baa62f65a7f240c9c9444f020976"], 0x0}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) pipe(&(0x7f00000002c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xd5, 0x0, r0, 0x7fff, '\x00', 0x0, r0, 0x0, 0x5, 0x2}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006, 0x17800}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0xfffffffffffffd3b) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@local, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7, 0x36, 0x3d31, 0x100, 0x9, 0x0, r3}) openat$cgroup_ro(r0, &(0x7f0000000680)='cgroup.freeze\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004001}, 0x8001) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x3f, 0x6e, 0x400, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000580), 0x5ac, r5}, 0x38) 06:34:14 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@empty, @loopback}, 0x10) [ 1636.239192][ T518] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 06:34:15 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="2a947354495ee7d43ace6e0880fbf78e993afbfe90a44de4a12b00484f9f26", 0x1f}, {&(0x7f0000000200)="b350d8a459dc6b65dfaa287643d5b1027adfe9647a77c6f4f115dc6063f7e73a82768ebea104788e997d0d02a5440e124bdf947c3bdf64940eeaacdf8f7fbabfe6303126baeb8979bfdb39fe549c3b2c5d23dbd3944d5660351239d1f40b3ebfa64d4008ef85c5fc0efa85f02318454896328bcbb882", 0x76}, {&(0x7f00000002c0)="3cd723b82355ed9f78cda5c2bf7ee6b9e733a0427ae2272c0729a2e9e28b2beae4b862c9ac320d4151dcd3cae35dd398", 0x30}], 0x3}}], 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)="55f93c13ccb266a4fb15031e63a79d965b357fe4254e327eaa7ef45286316520aa0627f2e0ccee0490f94f2f6595587357d52e313b75cacd335fcdc26644ddb28094192dcda1db067e5ff3e4cf686c42c3174f2c7a2c62036282d51996df005abc", 0x61}, {&(0x7f0000000700)="b11c45c4c430b3e9172a6ea20f926c73439056177c7fbd2b6a0f5e685c99b8ce95bcc66970e52c903fd49052634bad537a538ae1cc7f4ff744d6c60108e6bf57beae39d643b5a22130707a28860d2d2dc83af2740201717551181e57981fbf85f675f4a4a9523aa9bb72b961cecdcdd9eceae511c3e48410ec4fc42fd9c0f7dee0cc2bc0c049294aaa80053d02177ef02f63f26d7d7e60ec6b41bce40c947bc396cfad41c37091694effc40ec7a35a50a8ae2aae3cc506c87325030eae499675f014c73449c59723d2cbee039815b94051ee969b4cfbf859df1bf5660b22", 0xde}, {&(0x7f0000000840)="4bc87329165d99872cbc7a47", 0xc}], 0x3}}], 0x2, 0x40c0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 06:34:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000b8af000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=@data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x7}, @device_b, @device_a, @broadcast, {0x6, 0x4}}, {0xa, 0x0, 0x3, 0x0, 0x63}}, {@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1}, {0x1}, @device_b, @initial, @from_mac=@device_b, {0x1, 0x7}}, {0x9, 0x0, 0x2, 0x1, 0x9a}}}, @ver_80211n={0x0, 0x13bc, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0x7b, "ad315f43f6ef512a73b3ae17fb3eeb0ef423aafbde4f613ab531890c084c6e19264fca5e1bc0553519349a026e29c26a50edc4262f08b807092541bc6fc0b1b4c32a5e741368e0deabb20926fb34102e91dc955124bef3975cc47f25d671017a57a4c7eeb3cb1705c54239a29613296438324efec37b1936da21ed"}, {@device_b, @broadcast, 0x75, "baffd781dbac3e014e3f5fb186baed2e82b3e6c2c274aabf0fd9134092e8c72a7a100d13715e2e6726672a3504f4056b108d9acdbf357f1bdbdf7fe9f0382381195d4b690f3d8608159c88204d8ecb500bf8c6830d05e925dacac99de0314db66e4df9e558049165a1322adad1e16db7185a34fa3e"}, {@device_a, @device_b, 0xb, "3fc3fff75af1b71a3bf32c"}, {@broadcast, @device_b, 0x4a, "05f705e28397b9217291eeeb04a77986566377886113ba8524bbd8b90136e4b5323afb3faff9ef9975e7cdeb7414637447fdaf00de8b4a9671c4116059aafb287aa3797b299abecac505"}, {@device_a, @device_a, 0xb4, "d6e609eb9078533ab11cf5a65ef51dd3c169fba5f6fd493edcd39d52a5b59774256312c20b9d0b911e60f762f4f6cc2330ba6b24f0c88ef8e49c31aff2163dfe16648efd5d689c7182b730d743b11c96c7cb9597e7fee6b2edef1c6d784cfa2bcc05ebcb7237a6e2436f011a8496e24320c8bcb3c7df688a9941dde8849f9a47736416542bc68d259115115589d16e4c3dff4e5904b3d21f289eed480cb65b0d85734fa4979a3a96c595edbc91eb8d0e18b6bd1f"}, {@device_b, @device_a, 0x1000, "aaffe35b7ea4ba29d647f6afa59eb373715f18419883dfa5a0deae86b53d4ae8e6c6bec0dbea4667375f90d137f30a07c9cc4248d5846d532e1ea2f970bce4a70714829b973a6d5e11f6b07f4db851a447ef2908fbfbc11528899420e6ce63612ed5c6f185ae565789f2f308ad426c62642b9dfb6e660acd8e5afd1431356075e10c241e92fdaed32d56fb2894b17a43bc0ffba6c25bf61baac86db4f89278cb035e4d82fb02a5b4f28c4abb6e59ff610991b60a214464fff00e3f8e6185610a1b75beffddffb0191e41b652e5c3dfdd4498185fc431de9c95b3c3c7dbe6b3bca844fcd417fe7c2e5c16128eebec7afd9a38ab00ba6ae4c234ec9e84a88ba0a5a6532fba7bc66ba9eaf835a70ff4335726084b4d6abb2bc23f73cf16fc346a037f6a259b4e9e6c057f6ba84b67e78b005633c0a419df7bab096a8a6aa21860c21f24003c865f957b5f6de1a1f1caad9bc14308aeb34729a9a816eeb561d1500bc5ba8117f400a33a9b7eed0ca848e21de753909fab87e43a0cbb2dee475d3c5cfcd9136be7e37a6d41d558ad1410c1aa0c53d0357feca8a9fca7f975a3be4b380d82140715ad0fcc02b3b4fd2d4bcd29e7f905ac7718d5661eee3141b9b897dc34a7e35cbfb9b88a6302d14b2c6d177f6a12d8b2f6aa22e1d38966a71b74bcc47a76480b75012ff50024b1202f77583574d81c3f85339543f9f1aefa8cd29e68ecb7a6244db495b0c820b811bc4f6ee415a76eb3515d0a8b71a7abfc86787ecc9803f0d0ed05039e2655c8fbdd8959fb1991bfaf6dbceaa904cdc4acff3906b39f437ccc5a74ed001f580e2105dcaf26570ce19128146ead311c8d9db1c7d7589ba59e87536d7100f19ec593541444c16addfb1a9ad3a644194a05a34af330c8e3a5146b89f1ee1b9a9d8c64e1526405283e22e8f05436a98ce3cfc969f8b7c9bf8eef6870ec4ab9a0ac26472df5629328368b1003d6c2375696d49acc90adfcfeaeea8b5ace705e5811f6df84251afc07d2a351c2ca8647e4601703818ce3f98c8f316bb0a57d5037cfb2fb5895b778d3751c0b666b1dd9be6dd9aab3a8425c94c25a17412ae888cf44ac1d548c34a8f9a3c1c768b1b386bf07ae1a961d5a8a5ad3a74bb2017728cd28f991bf6655c365b163b501cba29952e91da3e2914601401565d6aee9eb47c0175cb0997a37a1ec4b4336373f3722edbdddb7ada582557a87c75c5893bd59a667c49d91e41ffd60e7f209437e30b074c1b5c2c7be18c32b90794ab807d925afc2966c8ad5f486fca44a2e4b059cf78524072f7d4214842a297ba84885d095176e85c1941794790cc83da2af9a96f2cf8e6287187e01284da94d7f11a6115eb644a37ce2aead94508f4d95123e087d1a85ff3e3cc08116d51a3e8a353d37c71c3d0e2c134237f04c5cc5b057584f79f7314456b9a4cec5fbe77d31b876381f8d726b06f680d22a55996ed23017910677018565d5eb68694fddff8180213b16899153da88ae9dc59d32869ef5d5e34ab234cf14057c2acf3aaebdd8b630c0a2bd030a4d1a3ac6bad95c55ea0a432de4386f12e98338e22458926f90eaccf0ff42a5ce9a071c8a97fde83b19ba621f2f0051634a1510b1b80150b7e00e461d56063cbc924b21b93154ea40e607a3b0ddf3746e95a6918893ca7870a4a33805bb5094460c0b2c696c910bbba4bdb73302b2a40b36886b6f301eaa4f900f219a87919522b79c5c406b0649c3e853b7ea2aa8bbe8ed701376913a64fbd787015aa31aa7eae191a1c6aa55f7032ede6be6c4abec067824cb0cf77e3bc4359da112ef261e78724b1c37f6fb86f880087bad8fb6610c3796a37cd1d93f25c8a0a076e9186ee0098bf0e8703cf22fc24b06682077a094d4676ba72954ce9d374373251a19642f28aabdf5fd4556b92343d40a7e1096adbef55d965b7c34749715f2ccfd29e58d6676b7e0dbc71a59d8429e53b007f1c065b761a6e46ba534ee1b318aed57f9e323b16bd317696406b8abb0df6f4023df9f239122f946bac1eecff2ea71f55024080fdd3374de0dafa7e4da5bf3792e4cf3b28e82e4f3596813377a10da6976429d1ba868cf1711b3920f3fd20e484657ea75b4206cfc7f947cef2cdd9aed3e2872c264997335849346dc24f9e0c721d66724a526f0d3d0a04cb4ae01fe3230ad9a8fb94418bfbcde74cf3394e17d88a590f04d45859f4905092619da64d459ddefe64438cc6027d53707a91d906f17ad1dca0d07bd8b7a7d64ff83cd855d86cca8169f5bf4861a7ef58f92ed1d4b5dbae9cc7882f0e5c288729a7cf397f07b9da33ec787ecf5ea07a4aea7f943feaf4b6352df2130b9c79cd9f97db5dc415acb481354264317f24329c3fe7c3c22270ee99fdb3b0dc5263cbce96c539c724b70fad9ea4cfc569ca5cb32fdd723e0073aa740f2018c064e9e9a74d4da9d9947c853103d2680cc2e72237657aa112ccdc158adcc606a20cff1c2d82c96d84b05d9a30b2fe575563c659b20a009d00e5cd4ce034bf764eba629377fe2e04a750e2ee2948e12b7fc8f745d03e8b1b3a23e673606fee963c30e4ded956aba2577a03f41ec30b94bcf633158c11144821fbc474d035dd572315cfe5d39624d373859f93ebf90b75cb58fa95bd0e647797263fef1732396da304b4f1b96a281133bc4cf0606046e7e76dd4291ee480baaf8fdb33347bb98612b1ab3a845259111b1dfb9d6533a505d23e889e8e0629d2d7cd62e33b3bb7e7b12b529869de91996a15250b8a694d880647f4a8091f3ea6333200966577045c831ca33bbbefefa00086e6eb15f20cec8a66026e038c784e18e59ad80b4b6219125011c8d540045010b0ff172c381e3c9ce26889d73b79cd7fb2ba4fc352e292c2f182a358d0a11ff213264e4ab36c0d6719b4e0d12dbd65978c101e1701772051065a2acd814c21a2ae5db82de6fce017577a05c2d6779036ccf8ab5f60d9cb5ca63df20849eab31c1472e0ab29dd00bf7c5a3db81324214590ec11de4e5818b2d56db5e0ad1e47aa91ffe8dabb73b55960ebf1f4f2b84ff9ce154c0534b8a0ec77ce769aac8acdf04d6ed99787f87f9880152ba5263b600295efd83e35bf8dbd8a04c896baee8fbb3497e45d20faf049590aab9198a0665f35b3b1d302985bd43edf2e4fd858bdbdfd0c3472ddf5c3bb3396fe262b741f9af53d1c0908051878f433a205eeea3c63b5aa2c0d5dbfa3884682ae08cd13d672919f8904dff8fa9f00be37109c7540e226c257ee7812a7fc9d5e35d32642df2065bdaa4d6acc2c7241035c2e2ec786fa14115121e96973f34838819048225efe7eb3d894e3ed9eed1663a7989c440c408457295e5dc82f3f230fe00c08e6fba8d96153255a901bcb121fc23bd617db72387f055acf69c7e1aa2b4df47bb8487b81055048c941bff64e3fc55890950fb9fdc2241f10c965971f9d4a97bee4bcc9c4b24f0f74df1b956865f8c1c9f9bee59229dbc139bb7ae6a81fc1c70b3275a5fb23bf16868e9e04fe4ac415b9b9e4229c36141219fa7fc9b867ee02c082f83d992040a03c641885666e1b407f3c8f3d9682924fbe0de746f192b1a83fb1b209c6a8e567c53560ceeadefc8caa567deba79d29f252680f4283b8b7465f42b882f2cd27def2d4a5c4afc90a25b2d643660740c3ac5a57569274af06e8a66ce07c94ec1cac83f27bc405010dd194a8430fed85e010a3208a7155903ae31259b3befad42a8c30e08b20c1d668c0ad28d91edf17ac16915807257ff2f0efe93bbf5792568606c1efbade3bd4e8cf30ad6af6c939334735b969076044029bd030dbdca2a91194e8dc261bd511a5948271f0d13ca56d78dc759e97ef961e0be5fb4f4fc1b4081a19426e50446e006ee542dd07a5d40e6a9a4be80ee0f04fb6cdf9a3a237d84b48dacad6f7883ef28a9d9e8335ac62c7c898ac0c98aa8213317bdf4f152d6eb0d80f3bcb614bca296c96cf6cf6a1baf60652c58eb9d98660852d10a5a39f69603c8abe4c3e11a2089f9f0cf0a59f274005d4b68fd95b9def3599d26148932359dbb162c05ac626b4f5c2e2d09626b0f97a5c378ab256b319cae57b2ad49f669ac009adbf8b2f8cb0d758634bda8152c2929ee8ed187f07a98f038c494ecc896516e2cdda4838dc211fa77035c378e3786f6045d30306bd6530e18f9be9baa1ce2724d4a68f7b07ecaedfdc716023dbf76f5d181b491bb51dae8b8e1ada329fcab818e840a0a7a1c1f423b17d77ced70ec783e124187b82528c273dce6e1d062cc7bc4a32263ea658e05bddb3a1646bf75c123061f684d2c6a17f4a5847f7fb723ca7b44164fe9343ed2b2ac4d14f092fea937a1273810d9124af0c65681a60c17c94f0ca7d04ad9c2a4f013331e9b38b8a270a77f4960fb4d922974a89d5dfd77c69ed4be64766de6e62191ff7cb357307d998b9c1ed77dee4a784fc974f1c28beafbd066591433fb4115366c271c968fd2808e04343e6d3001a00e63e97a931b56744ad8ce1792d5c5556e2509f9025bf6e39504ef74fb4c78c87fcdaaf95800c61ec09e814048f09d9348f897f9ab27147af45fc1fb5eaff08939b7c344e58385fe838dd2f8485cad7649ce9e1eeb65c10101db0a3a881ab3fd3190fce54ddd0b73ebf5fed54518329922497a7404d62812551927a4142291127aa665a75f0d038384c37082a774923701b94fd55644eb2365c30fb1caf39e87a7a96954723493cf1da66d1817c86778c141b3c18cb6bb88cffab7d44546a13f2b37b1a350c56450df1f033988a4267a5cce6fcada870286675e6786aa85a4da13e4d568c1d7243a4fa059c16e465a4148b9e4235228b742e76dffc01d86cc4c707062be1f5e3ab744701f54c76720d1ab67565e7af067bf72df91ad0aeb73ec6af7573e96bd7223e942665ac3587aa5d2e139b990fec33fcae509b2ddf6474f4192ef00a6abc2f073a7588c08d4352446e1cdef6e0f7213d00b7d4c903994720a3697357059929ea58469cc4b8392b759691f336c44e169a31b61d52953302c57bdf397577723727a4cc9a56e022059287de3241e54de8438167fc25d8f2d73e4a5e34c81d7d36f2e703d2cd10c2fb55e2396da41ea72a511a45e9240da3b445ea312168e087b5fab33e51c634b047d79417d701812e86a6f486d2fa4a099cbffdb4e26eea403469db7489cc47d38502827d468676a0fc56188b132d4b9372197ca5ff13b1b77c4eab8b7d982c176e0808e0b9a76c2cee2378dd01aa15990947948c554d5418f3b7ed656ff93f10d04ebe6abae6f1457febf081ae4490ed1c96f46d2fb457bfa93a523fa3cad1f0b7ebb68ae8590792c50f5a7e6c5bd0a744488305c600bc483bcec9e230f22568e0297142f9991673d27a395f86419c44c1184046278333262a207245caac5c6e77924eeb79fbf6bf217d13c4828555e8b5910ecc2c9a8a35262120b0ec71e0b05764283c3ceb242d8d44b38aac647850a61455a09e4b74c5d5d9b107aa3ab73735d8dd91816ecb61ad078d2d8fa3ef45d7f23dee9dd7e1c956d2ee0cb14a436d79a844fb1a46ad9c76809ad69128f6204e0f9917b469dfa3a2c6ccea1c9fa3c31f8634b8beca7f7a447bea18cfd1f2400a21731325c5fdb12ae023ac759bfc7d4ed63e8129fdbd7c8f79ae55d008537cc20e8c14f6c85934ea79e18ca892aa4501983536a2423fdbee100a4e418c37a6b7bee1e27cee3cb3070c115fbad2ddddb20abdf8ed6517284f69c7d4b2efb9542f9faef53c657038a266a0a"}, {@device_b, @device_b, 0x94, "691ff3bdbef376f7712d8810d73aa10d15280c13ef5e4b815c65bf29c850fd8b83d23bdddc30d81ab6226d90579f00b37d10acd9b8342744e17e59b405f64ad93c64ca658e752899b50179fde5a3f7dc9fca1b80706f8e0f28941d427846fc5e4d86fc060307325da1ce84ada329a4d1aabc3f679b327c3e49f6d847d93b1fbf186203906bbd300fa04bd0ca61e1a33680909c75"}, {@device_b, @device_a, 0x22, "564f7ba4beef4823a17ae394a24a6e484682f66f6a6cf95893d4c9b10e0043df1e65"}, {@broadcast, @device_b, 0x7d, "bd88f548bc2ab6d79459b02f504b9e4262c6e8e4e345a5409bc1a999b87d66da3a5aec0af9b89d90b2ad68fe912f9d07bd72546871336417e1ad02cdf27ddf1f089a2ee0a69ec2dbaf02492f84ee3aca8e5ed966c5b9036f718a1751834d855aad8bd191bb987fd777d2520da5ef865a72cf0c03973ee7f55cd7a2c191"}]}, 0x13f6) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r4 = socket(0x2, 0x3, 0xc3) bind$netrom(r4, &(0x7f0000000000)={{0xa, @null={0x40, 0x40, 0xe0, 0x40, 0x40, 0x40, 0x74}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null]}, 0x48) (async, rerun: 64) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x50}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f00000019c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x28, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4f19f323b67ca47d) (async, rerun: 32) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x2, &(0x7f0000000400)) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000001a00)=ANY=[@ANYBLOB="9d0000000802110000000002110000000802110000001000000002000000f3ce22539efde4a6a2c559cd71206704b67462c2840fa3d1f318247a5679da0b47281218c303c7b011ec2982f0c1c57ed01946db735b29336fcfec9ce5e2804b26b69d8bdbdc711d3c551879a360afa2c6ebef65dcaad53d7b1000000000000000"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x8001, 0x1, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:34:17 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001b00000000000000b296ffff850000002a00000095000000000000003af1f53778422dccc1c382ce1b03e2cd30a568baa62f65a7f240c9c9444f020976"], 0x0}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) pipe(&(0x7f00000002c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xd5, 0x0, r0, 0x7fff, '\x00', 0x0, r0, 0x0, 0x5, 0x2}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006, 0x17800}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0xfffffffffffffd3b) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@local, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7, 0x36, 0x3d31, 0x100, 0x9, 0x0, r3}) openat$cgroup_ro(r0, &(0x7f0000000680)='cgroup.freeze\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004001}, 0x8001) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x3f, 0x6e, 0x400, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000580), 0x5ac, r5}, 0x38) 06:34:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001b00000000000000b296ffff850000002a00000095000000000000003af1f53778422dccc1c382ce1b03e2cd30a568baa62f65a7f240c9c9444f020976"], 0x0}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) pipe(&(0x7f00000002c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xd5, 0x0, r0, 0x7fff, '\x00', 0x0, r0, 0x0, 0x5, 0x2}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006, 0x17800}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0xfffffffffffffd3b) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@local, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7, 0x36, 0x3d31, 0x100, 0x9, 0x0, r3}) openat$cgroup_ro(r0, &(0x7f0000000680)='cgroup.freeze\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004001}, 0x8001) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x3f, 0x6e, 0x400, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000580), 0x5ac, r5}, 0x38) 06:34:18 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001b00000000000000b296ffff850000002a00000095000000000000003af1f53778422dccc1c382ce1b03e2cd30a568baa62f65a7f240c9c9444f020976"], 0x0}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) pipe(&(0x7f00000002c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xd5, 0x0, r0, 0x7fff, '\x00', 0x0, r0, 0x0, 0x5, 0x2}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006, 0x17800}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0xfffffffffffffd3b) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@local, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7, 0x36, 0x3d31, 0x100, 0x9, 0x0, r3}) openat$cgroup_ro(r0, &(0x7f0000000680)='cgroup.freeze\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004001}, 0x8001) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x3f, 0x6e, 0x400, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000580), 0x5ac, r5}, 0x38) [ 1641.405111][ T522] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 06:34:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000b8af000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=@data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x7}, @device_b, @device_a, @broadcast, {0x6, 0x4}}, {0xa, 0x0, 0x3, 0x0, 0x63}}, {@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1}, {0x1}, @device_b, @initial, @from_mac=@device_b, {0x1, 0x7}}, {0x9, 0x0, 0x2, 0x1, 0x9a}}}, @ver_80211n={0x0, 0x13bc, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0x7b, "ad315f43f6ef512a73b3ae17fb3eeb0ef423aafbde4f613ab531890c084c6e19264fca5e1bc0553519349a026e29c26a50edc4262f08b807092541bc6fc0b1b4c32a5e741368e0deabb20926fb34102e91dc955124bef3975cc47f25d671017a57a4c7eeb3cb1705c54239a29613296438324efec37b1936da21ed"}, {@device_b, @broadcast, 0x75, "baffd781dbac3e014e3f5fb186baed2e82b3e6c2c274aabf0fd9134092e8c72a7a100d13715e2e6726672a3504f4056b108d9acdbf357f1bdbdf7fe9f0382381195d4b690f3d8608159c88204d8ecb500bf8c6830d05e925dacac99de0314db66e4df9e558049165a1322adad1e16db7185a34fa3e"}, {@device_a, @device_b, 0xb, "3fc3fff75af1b71a3bf32c"}, {@broadcast, @device_b, 0x4a, "05f705e28397b9217291eeeb04a77986566377886113ba8524bbd8b90136e4b5323afb3faff9ef9975e7cdeb7414637447fdaf00de8b4a9671c4116059aafb287aa3797b299abecac505"}, {@device_a, @device_a, 0xb4, "d6e609eb9078533ab11cf5a65ef51dd3c169fba5f6fd493edcd39d52a5b59774256312c20b9d0b911e60f762f4f6cc2330ba6b24f0c88ef8e49c31aff2163dfe16648efd5d689c7182b730d743b11c96c7cb9597e7fee6b2edef1c6d784cfa2bcc05ebcb7237a6e2436f011a8496e24320c8bcb3c7df688a9941dde8849f9a47736416542bc68d259115115589d16e4c3dff4e5904b3d21f289eed480cb65b0d85734fa4979a3a96c595edbc91eb8d0e18b6bd1f"}, {@device_b, @device_a, 0x1000, "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"}, {@device_b, @device_b, 0x94, "691ff3bdbef376f7712d8810d73aa10d15280c13ef5e4b815c65bf29c850fd8b83d23bdddc30d81ab6226d90579f00b37d10acd9b8342744e17e59b405f64ad93c64ca658e752899b50179fde5a3f7dc9fca1b80706f8e0f28941d427846fc5e4d86fc060307325da1ce84ada329a4d1aabc3f679b327c3e49f6d847d93b1fbf186203906bbd300fa04bd0ca61e1a33680909c75"}, {@device_b, @device_a, 0x22, "564f7ba4beef4823a17ae394a24a6e484682f66f6a6cf95893d4c9b10e0043df1e65"}, {@broadcast, @device_b, 0x7d, "bd88f548bc2ab6d79459b02f504b9e4262c6e8e4e345a5409bc1a999b87d66da3a5aec0af9b89d90b2ad68fe912f9d07bd72546871336417e1ad02cdf27ddf1f089a2ee0a69ec2dbaf02492f84ee3aca8e5ed966c5b9036f718a1751834d855aad8bd191bb987fd777d2520da5ef865a72cf0c03973ee7f55cd7a2c191"}]}, 0x13f6) (async, rerun: 32) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async, rerun: 32) r4 = socket(0x2, 0x3, 0xc3) bind$netrom(r4, &(0x7f0000000000)={{0xa, @null={0x40, 0x40, 0xe0, 0x40, 0x40, 0x40, 0x74}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null]}, 0x48) (async) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x50}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f00000019c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x28, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4f19f323b67ca47d) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) clock_gettime(0x2, &(0x7f0000000400)) (async, rerun: 64) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000001a00)=ANY=[@ANYBLOB="9d0000000802110000000002110000000802110000001000000002000000f3ce22539efde4a6a2c559cd71206704b67462c2840fa3d1f318247a5679da0b47281218c303c7b011ec2982f0c1c57ed01946db735b29336fcfec9ce5e2804b26b69d8bdbdc711d3c551879a360afa2c6ebef65dcaad53d7b1000000000000000"], 0x1e) (rerun: 64) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x8001, 0x1, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:34:20 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@empty, @loopback}, 0x10) 06:34:23 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001b00000000000000b296ffff850000002a00000095000000000000003af1f53778422dccc1c382ce1b03e2cd30a568baa62f65a7f240c9c9444f020976"], 0x0}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) pipe(&(0x7f00000002c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xd5, 0x0, r0, 0x7fff, '\x00', 0x0, r0, 0x0, 0x5, 0x2}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006, 0x17800}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0xfffffffffffffd3b) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@local, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7, 0x36, 0x3d31, 0x100, 0x9, 0x0, r3}) openat$cgroup_ro(r0, &(0x7f0000000680)='cgroup.freeze\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004001}, 0x8001) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x3f, 0x6e, 0x400, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000580), 0x5ac, r5}, 0x38) 06:34:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) listen(r0, 0x1000) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:34:25 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001b00000000000000b296ffff850000002a00000095000000000000003af1f53778422dccc1c382ce1b03e2cd30a568baa62f65a7f240c9c9444f020976"], 0x0}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) pipe(&(0x7f00000002c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xd5, 0x0, r0, 0x7fff, '\x00', 0x0, r0, 0x0, 0x5, 0x2}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006, 0x17800}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0xfffffffffffffd3b) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@local, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7, 0x36, 0x3d31, 0x100, 0x9, 0x0, r3}) openat$cgroup_ro(r0, &(0x7f0000000680)='cgroup.freeze\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004001}, 0x8001) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x3f, 0x6e, 0x400, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000580), 0x5ac, r5}, 0x38) 06:34:26 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001b00000000000000b296ffff850000002a00000095000000000000003af1f53778422dccc1c382ce1b03e2cd30a568baa62f65a7f240c9c9444f020976"], 0x0}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) pipe(&(0x7f00000002c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xd5, 0x0, r0, 0x7fff, '\x00', 0x0, r0, 0x0, 0x5, 0x2}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006, 0x17800}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0xfffffffffffffd3b) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@local, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7, 0x36, 0x3d31, 0x100, 0x9, 0x0, r3}) openat$cgroup_ro(r0, &(0x7f0000000680)='cgroup.freeze\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004001}, 0x8001) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x3f, 0x6e, 0x400, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000580), 0x5ac, r5}, 0x38) 06:34:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff003}], 0xf, 0x0, 0x41f00, 0x7000000}}], 0xa900, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x10000a006) 06:34:28 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x34, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x18, 0x19, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@tail_call, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x1ff, 0x60, &(0x7f0000000bc0)=""/96, 0x41000, 0x18, '\x00', 0x0, 0x28, r0, 0x8, &(0x7f0000000c40)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x6, &(0x7f0000000f80)=[r2], &(0x7f0000000fc0)=[{0x0, 0x1, 0x1, 0xa}, {0x3, 0x1, 0x0, 0xb}, {0x5, 0x4, 0xf, 0x1}, {0x30, 0x4, 0x4, 0x8}, {0x0, 0x5, 0xc, 0xc}, {0x0, 0x5, 0x8, 0x2}], 0x10, 0xbe3}, 0x90) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2d, 'blkio'}, {0x2b, 'blkio'}, {0x2d, 'cpuset'}, {0x2d, 'cpuacct'}]}, 0x1f) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r4 = openat$cgroup_ro(r0, &(0x7f0000000200)='memory.swap.current\x00', 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2b, 'cpuacct'}, {0x2d, 'net'}]}, 0xe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0xe, 0x0, &(0x7f0000000140)="3c56d79e2a63b843cb04436733f9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 1650.901655][ T28] audit: type=1804 audit(1704695669.574:991): pid=582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir339840382/syzkaller.xArHKo/1340/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 06:34:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) listen(r0, 0x1000) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:34:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff003}], 0xf, 0x0, 0x41f00, 0x7000000}}], 0xa900, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x10000a006) 06:34:31 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001b00000000000000b296ffff850000002a00000095000000000000003af1f53778422dccc1c382ce1b03e2cd30a568baa62f65a7f240c9c9444f020976"], 0x0}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) pipe(&(0x7f00000002c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xd5, 0x0, r0, 0x7fff, '\x00', 0x0, r0, 0x0, 0x5, 0x2}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006, 0x17800}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0xfffffffffffffd3b) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@local, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7, 0x36, 0x3d31, 0x100, 0x9, 0x0, r3}) openat$cgroup_ro(r0, &(0x7f0000000680)='cgroup.freeze\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004001}, 0x8001) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x3f, 0x6e, 0x400, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000580), 0x5ac, r5}, 0x38) 06:34:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001b00000000000000b296ffff850000002a00000095000000000000003af1f53778422dccc1c382ce1b03e2cd30a568baa62f65a7f240c9c9444f020976"], 0x0}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) pipe(&(0x7f00000002c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xd5, 0x0, r0, 0x7fff, '\x00', 0x0, r0, 0x0, 0x5, 0x2}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006, 0x17800}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0xfffffffffffffd3b) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@local, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7, 0x36, 0x3d31, 0x100, 0x9, 0x0, r3}) openat$cgroup_ro(r0, &(0x7f0000000680)='cgroup.freeze\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004001}, 0x8001) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x3f, 0x6e, 0x400, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000580), 0x5ac, r5}, 0x38) 06:34:32 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x34, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x18, 0x19, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@tail_call, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x1ff, 0x60, &(0x7f0000000bc0)=""/96, 0x41000, 0x18, '\x00', 0x0, 0x28, r0, 0x8, &(0x7f0000000c40)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x6, &(0x7f0000000f80)=[r2], &(0x7f0000000fc0)=[{0x0, 0x1, 0x1, 0xa}, {0x3, 0x1, 0x0, 0xb}, {0x5, 0x4, 0xf, 0x1}, {0x30, 0x4, 0x4, 0x8}, {0x0, 0x5, 0xc, 0xc}, {0x0, 0x5, 0x8, 0x2}], 0x10, 0xbe3}, 0x90) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2d, 'blkio'}, {0x2b, 'blkio'}, {0x2d, 'cpuset'}, {0x2d, 'cpuacct'}]}, 0x1f) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r4 = openat$cgroup_ro(r0, &(0x7f0000000200)='memory.swap.current\x00', 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2b, 'cpuacct'}, {0x2d, 'net'}]}, 0xe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0xe, 0x0, &(0x7f0000000140)="3c56d79e2a63b843cb04436733f9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 06:34:32 executing program 3: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x300, 0x0, 0x1f00000000000000}, 0x1f00) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write(r6, &(0x7f0000000180)="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", 0xffc) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4c8, 0x1c0, 0x370, 0x370, 0x370, 0xe8, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, &(0x7f0000000280), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x16}}, @inet=@rpfilter={{0x28}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4e21}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xffffffff, 0x0, 'bond_slave_0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x2e, 0x1}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x90c, 0x42, 0x1, 0x1}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x1f}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x40, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) [ 1653.711742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.691511][ T28] audit: type=1804 audit(1704695673.474:992): pid=593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir339840382/syzkaller.xArHKo/1341/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 06:34:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) listen(r0, 0x1000) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:34:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff003}], 0xf, 0x0, 0x41f00, 0x7000000}}], 0xa900, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x10000a006) 06:34:36 executing program 3: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x300, 0x0, 0x1f00000000000000}, 0x1f00) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write(r6, &(0x7f0000000180)="aa491a4bce62b62bd1e693119832d4cd83b5580d7c7caae4559bc29ff14487e15e141b5685445ddc180cfbbbdc00a250e8f377ccc060234aa43739bedce290be1dbb0ef026f37678f8d427f629fb89bb10a0eafbdd80903e03b2e8327e726b94ff6edd1c7a2944fbcc7e37d8c45e37243f35acb3d28871650e370555966b4cee7f8dd48076f43f851f36e722ad83e3b5ec66096cd8a8db9e2b10bf4ede99df2d9c5ca9790b09374fea757ac261a3dfe3523d357b1caa40a78a133056eb59dee5cd96715e4892536171e183662977db2dab97dc96aa2726dfa3bd3fbb129569149fc642a132efec2ad6f49d7b6d0a8c41d08e1c7557b66d2e47edfd2abb5bd03512b38e55ffc7306f45c75e7f8cdcce3e7704598cf0b4c4f6f437cc846944688ec8654a8305a7ef9229c16d7aaa532c76f98521be93d030621d68e6aef55086aca5d623d94f4c979eba0f32fe975d1939a1f9267c29a4261486e742c31f8a5aeeda786312af52cd4ee0661615e3bc3e73d795ee98e3c05284b2220051bded4d6daf359d0135a29393763df323b48321f6009be4d738595215dae786147aad3a1e59145ee864d76444132d78f3b1382790124c494e90027e8ad2fe01598e7170f58aaceb2dfb373763993e2f3250c0c713593e2ef51f51c821845d65577284ea5b57ba163ed00c994744ab79be37935d61f298e449029ac04a49e350c4048eac7b33d4ba62fc4fa625e9787156c1cb442b9e442ab59e22090276e697382d0cf519d4a3cdf009487c79f0fe495c2e3eab22dc57abada503b2d7c66039999b90130008c578ac79dce3262d6f3cd6ab01020a1e9d6d93369b54b6ec46faca662954c483bb44f4dee0d0f7fa19f9daf5f358dea43385df8f5a3623eaa20508596b9d9d88f2eb73dc419d6a90aededd51603d356026015e6159ed38cab0fccf0544413fb10f8c0acaafd24be902ddaf0f04684abe430f3b68f51568f7fb60f7651dcd26fef068c378d5fe4b080ad7c5b8c595b02a3660beb56c9c459a9f93c59e9dae47a12ebea4e95fd6e7576b7f12db5539d7c26126eee7abaac55803fa575816c0f9bd9c12f05339e9aac0c4a6b267e372ffb96850d70c3cf6313819ce5db0a0b111c210a37347f2847be3f94dc0af0939a1b0b03977172f271f3630ba5cf297524be91ef8de9c922d89cb63dca7a327d2e48f253bcf62e60a2b132a99f8327c3715beadf36c5b660b997d4ac686a63567ccc8dd4835a8a3d6c52fc79e621f5d822044eeb68b877eed60e5571db05b86e19622aab17f440da4bad2765dd32ed70ce30b840050abf9f7a748fdae932d1f7ee338d78cb5aef0c358332cc5fc3a6af343c22256bf8e3643f5ce0d1143b3a491a5bced884c84ca59b06d095b95b3053245e5c8389560490013838ec34849bf93afe28505f7fe3c74b0cede80f9bf157493eb21498bc64cf0bef2d0f6ab907fa7d34507eba3f2d1c4bca9c11d3423d8d9fdaba4954b0e449f8f6f684c1f1d78b40a50f005c2c40f1308d84951c0449a65915bc7ef0a84b1776ccab0eef1ef4ff945e4ce68fb785ddd776d1b28e03650a305b84a87371f090cf4a385815ac377a7d55ae863928f646982801583f3939c4e3c6f95cd527d241cc7c47824cca1cb805e77ef9c5c8f3a55b3c01ff0b8406e87ea5b9a562b5c2834d1290e4d09d531e12b81791836ec00afe4ee43c715bc81e3029f7dcc6a957fe8be712d07baf0924997764802e51ac4592d97d4166bae51411998a860648d2134ea5f4be6acf5f13a936ce62699ef4d81cbc3805dc88d8bfe45bf6e8fcfa6d0885eb2ab8e8ffd286033d6fb5cb280dbb4e7ba53c85cc95ea6a6c3aeca6479f11dcdc68086d6fab98803340b634bb8ab8a3a2f032eeabcccbf55380e95ef229bf66b74585c2d157e7128f282b6d7b52e76cf6fc4084608b048b6e2f7bebb3462089d3b13cd90c4a94f5c6e09219473153a440d72e231fb75896ae6fd5caa8413df4d7bcdd533fdcc3dfeeca90de582a54453f77ed41664f416697d70ce38efbdc321179dc694e012531610966ab912675347fcc30780850c46a0d975e6739df8992d2eb4ca6e4a244eacdfe7b2740e6c4417860f8f271772b28d862dd4896408253e85b48471f190e764c44a27a57232dc0760bd1f148402d546186c37d292e7f5cac871138be80b6f371d4b243ec06928bc8b78a8c8faf16b22552cbbebe9c4d183f5cb967c005a0362934bfb4f2ed2a18bd621153adb2dfe6ecb6ca1c394b8be0ec8f24b78a9507ca1da3d05932c964bc449f4511c428a115c493c0d7c23a6ed69a0657098c6b0838ebdcd9ab18cf91eb15e5947f1699da6fb01045430d813a5a9ad599200a9af7fd95aecc020ba981cb896cd8d1acd625e99c5dcb39196f9110e03e570c3655d3afa37e56b4695cc35303d407efde483180c6097ce89c21e5bf7cd7d1ecbf72de2a0883c0776d8067a1942b2a85d0a9860bd42ad3930992b330890abdc31f298d12a7d228a64c3babce55d766dc5e0787b43ff1a7583cda6030616adc6f445662d56c031a223d241cbe30d8f87d00dcc0e0eb4e9b6babda8289ae99232985a4388e26b5712d6b042f268580b3645cd42749b0bf4b0897163bc01d6bcce0a2b16c16a54f20590111683828e26bbd804a8963b106a0dab63b4f5fe70d7844f44a2bde758a6ef8e58d88da7bc68c139f66c56473c883213a2aac6e531e52f41aaf2a1da07644f0cdc624ed5addc434ecc6904b8e7efdce2bbb0039110f3faa3983e8b511b7cb369c00dc880d30c2c7974ae141cf1f5a0a0a99e6a71430bd043a634df8715822b429ffd63686ab0af19408197c89de5e68c8ab753f6e718e5a52a48974d675092bbd5dd7f2a8664c1412609014e9a4b5b792186dbd383240a4dd8338e8bda69d487ea21ee00c91d2e4b008b0607cca6a43f1b6c6efa97d8fed1f55b79eef6665ec42602c0afaa79b94a0b0dd00f0f40e177ded581771ddc7d27d5b5a738e5329922bb4d6b1dbef6d0520c005dd9d68bc4987807e04bf4a1b1a3e473dfb48735a9cd158c718076199f7f40b0c513141391d852295c837253e5c294f9cfe99337d760e644359d07471f0b6ea9606c46a828e4c49b7017c7f854ed9f480bdff6ed83087907754d86620f3d2daa9bd48d29f8d710ad7669e643a4f229f83cd1ea8ca72d99c74fc8ca8bfc39e14c2fe18b69b3035645a710c2fcb159c8c05af1b55e05a125a670eac37432b20888e25c291be229b5e7eb8310f628279e600338330692f14656b719130121efd0f13fef22a8f396a64619bb7de7e82578e32c8f43d41c7c469686b1ac3f3508695519bb9b3097f7f0590a505a87aaabe2dc374e329aa4a5319abbdfed8ba25da050f8a6535bb666c8bf5381cb85ea16b93a571d0a79af97d943eaeedb7b71be70f281949e3def67753e265a13a9b1fac2c992316b27e9411b4491b48ea998b2040995dadd43c049c4a3460c59d5514b222f13b55e4c393afa481dfe3d83d1589636841b4a0398e7bd6e06e6240ab154dfeb92f37a7cb750af9d5433d2a77d9b5f7f3f795a1ca049d760ad80adfacda72c82273646db768f66a41a54ec064b7dc2cd7842e19140c152293880ddbe18cbf193dafdd8dd85a2367e68be8f3c709dd6b37df52dd4a63b8fb0c7fa24e445c823b07855714eea939409ae836c2d0128a60facca742a61a634998c6dc991e4605100a3800c2eeb6cd46f8491b51cc8d1b5e32ad2998e14c52b0d6e3e04f8d87a912fdcd21027e2a187b7bf1d9ef9d0eba2bf4124c3afb9cb03483d81c6d94c6619e9e077fafc02156936edd1d3ccf4bd0793d9a2714d9ec7169cbcaf900bd06d67ab417b0d76667c962fc004022a285e4c7f09ea4023e4b141db9411a0ef26b6cb76ea0b51f4d1ae732eef7dffc48af204a5ffa7070c550a790b20c786b76a11952e69d3b1327d878d0dfdb4c7cd063c508cee6ddf6ebf3b2bd7bbe24d41f4ebc6cdad6e2f6599b9c8c776bee2edfb46768c676727d1b49550ade74e02332e999513856882d4014003df799286211e2615539203be245240d93b1a71801d86cae80101612879cb864da48450e2fc44ede9335dcd9cee57a154c0f29588de446731b81c5ed92c805a1ce327824025e7a96bd01efe7b04be89e7a0733c05871f48cece4e85f8e02cff6289f9e9c1fce2b6bc33a47ca792f4f26f748748587e78d7993fe10b3c15f2d062d17ca93b336971be605295d6c4dd2f3be9b18b89ed41e199a49c1463f0babdf52cca708c11ad96a94d0a8848405c47ec9a890227b1be4cbc97d66bcef14e704e0bbfaf701e6a6e1a2a094716727b422ad31957891919286c64414cb919a9ba8348d6f9651f998a214ae9f872c84c5727cfae9ac99441db310880e2e4de216432a4e0baf67fcf8e19d58cdf85231ed9a1b05f278d53c84aa83c8ad8df35b4b9e5f4900777cc9b49976144e3f3683b1daf8525620ffac83680c33136ab21918e1fbc7f81d2f87b1a1aafae4a3280670f0ae4de4b6685ee0b5ae3258f4d659752939624df6a06afc5587b98c3af59876198eff7c37ba65d34b660b3b1aa93fec861f3053c64204f2dbac3127b9a50db1eded01080a213adfaa09a3362bcb96564e6fa074f845ad9e3a1dbc860c41dbcbd0632ae9149d978c77f8ac505854b55c57dd96c5dcf1b6ec6e0953948b86db9650d0bbb50ba418cd21a5ca517be7dee1171ebd81c82b27865a8764e82709dcbeb96185a76e88cd565010b563aec4476c085174cad5f5387468131af88ef39e89b70536c6671609164bc82a83e1203abace69f6427f4938f19d696a969479f70df90a1d6dd486bb8621745d073488d2104e52543074f0a403ec2e82b58075fb6e13b070b81b50192102d9f17311e33c16bee8477646c85ab035fece7e4b49fa6718ead07a5fdf0d098c75adcc03c7bdfd4051d3fd9bfc0934667142d4f9f0235538954898e1ba88881e6d722eba71aabf801055250a689bd19cbbe99ae667a424d0559370cd6a3a3a8b1f060c041f01c1e47ff1c6f8e2c8f35fa24066d97793dc43a0421c4db48f20705c2a1765eaa3d1b3689b5f68324b24b326cf17cdb9bad29fb22766209c3941109458ab2722a5bc0176188e78896237eb20b949f7a498b625b0e19735e1da043dd589c7e793daa37a63003dc85dccfac8fc6c9bfb08d45d58000f6ee410dbcfc7d18e36382f05af428679a3cfce2f6d9ad003d423c95e449d393c00c9b91e6724643ca0f3729c4e9861cc10101848fabe6ba7f9d553d0d621b4eab04b835cf533fe9c4c71969588c651eb57f71993a68f90b3dd02978988f592a7f4fd387f6130a994ad8713091540f08d55b8696c2a3309521546b0f2ab6dddf51b9d5949517fdf14ee714fecdd5e32939a1138669fb234ab30f19c851b50d3ec29716eb604595aed5b10196429fb83f4186e52b75adcb173e3bc73ac81ceb470a5709311e52e665cfae35410093230372fbbde2a636ecd1a64ecf2fe861f3c5f2d1c0015ea308771119ead00e083cc76be98fcde380d917a054eb32a2b7426181be1d11aee90835de873c9e9fb7c0581c79a1b9736472cb9a53014edbf00c83dd82c8d247f8e5033b2a87b2566a6120411f6023d767a3f6cbba491fc5353cf283336292e94c2e8ef891a000e9f3018076a098474ea6eae9520c668a49e92d3cfbfeeb2afb51aec97f865d4b7c7db49d32ce5a14c5b9fc35f252382711cd5c1b8a8b5c18a7f04248c740882c7a193a5443be3e8197f4", 0xffc) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4c8, 0x1c0, 0x370, 0x370, 0x370, 0xe8, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, &(0x7f0000000280), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x16}}, @inet=@rpfilter={{0x28}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4e21}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xffffffff, 0x0, 'bond_slave_0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x2e, 0x1}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x90c, 0x42, 0x1, 0x1}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x1f}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x40, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) 06:34:37 executing program 4: r0 = socket$kcm(0xa, 0x3, 0x11) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000040)=0x1d, 0x4) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20) socket$kcm(0x29, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000ac0), 0xffffffffffffffff) write(r3, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='3i\x00\x00\x00\x00\x00\x00\x00\x00+5\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="780000077fffffff000000074a1400280066000000299078ac1e080100000000440c0333e000000200000001070740e000000100"]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) vmsplice(r9, &(0x7f00000009c0)=[{&(0x7f0000000940)="795b389eb71546dacee53017023c7b42f079cedfaa5a71ec66bc70022ac9e5331d3439005c3eda6dca2151910d8dc71d59689b97677997dbaa8d980ecfaafe62fdacca89e5cb13ef5433a83bbd2cd8635584c621415fcd41082246ac862d83cb5d4c1d4413f4b10d97af991a27a98f00f836", 0x72}, {&(0x7f0000000700)="71fdf94f24bf33ee7d89d45feabdfa11e49873e5922c89ab50878b3163076c64b5ac60f3c403fcf4c0e67d897a4e064e3a2e8e1f0776", 0x36}], 0x2, 0xd) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)={0x5c, r8, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0x5c}}, 0x0) r12 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000a80)={0xffffffffffffffff, 0x9, 0x8001, 0x401}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a40), r14) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x14c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x60, 0x0, 0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x8, 0x1c}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x30040800}, 0x0) accept$inet6(r3, 0x0, &(0x7f0000000a00)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', r5, 0x29, 0x0, 0xff, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x10, 0x80, 0x40, 0x2d0bbe6a}}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="f4030000", @ANYRES16=r8, @ANYBLOB="10002bbd7000fbdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="50010280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ff7f000008000600", @ANYRES32=r4, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000acfe04000600000008000600", @ANYRES32=r2, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c0004008100005dffffff7f000102090500000040000001ff0300007f000203010100007f003f1f0800000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000200000008000100", @ANYRES32=r5, @ANYBLOB="f80002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="40000100240001007072696f7269747900000000000000000000000000000000fc00000000000000050003000e000000080004000300000008000600", @ANYRES32=r5, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400bd8a000008000100", @ANYRES32=r15, @ANYBLOB="3401028038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040030d4000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff7f000008000600", @ANYRES32=r4, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000001000008000600b4b7477d87aa30391d19b02fa629cf3dfc66b4f79c7160ace2bce9868d674c9866a0a8b8fe2d607617b860e3936ee09be4acdd573ac09f8fc78c5ef9366cc32e9dd27a1f53ca99b996f6b170056657c3976f6428431cfddf6a9fbaae3dea8e8dda26faebde7b5b629bd372f3ed23c8cf12d4ec6c98ac614ee257f036dfafb0c5212fc0013215c99ea902124b8aecac9c", @ANYRES32=r16, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004007f00000008000100", @ANYRES32=r5, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ff0f00000600070000000000"], 0x3f4}}, 0x10) [ 1658.459169][ T28] audit: type=1804 audit(1704695677.244:993): pid=627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir339840382/syzkaller.xArHKo/1342/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 06:34:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x58, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x1e, 0x34, @random="9a101e3fbe2b62c56b2261a16d7f9820af45f01de24582c6d0cd"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x58}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:34:37 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001b00000000000000b296ffff850000002a00000095000000000000003af1f53778422dccc1c382ce1b03e2cd30a568baa62f65a7f240c9c9444f020976"], 0x0}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) pipe(&(0x7f00000002c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xd5, 0x0, r0, 0x7fff, '\x00', 0x0, r0, 0x0, 0x5, 0x2}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006, 0x17800}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0xfffffffffffffd3b) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@local, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7, 0x36, 0x3d31, 0x100, 0x9, 0x0, r3}) openat$cgroup_ro(r0, &(0x7f0000000680)='cgroup.freeze\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004001}, 0x8001) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x3f, 0x6e, 0x400, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000580), 0x5ac, r5}, 0x38) 06:34:37 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x34, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x18, 0x19, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@tail_call, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x1ff, 0x60, &(0x7f0000000bc0)=""/96, 0x41000, 0x18, '\x00', 0x0, 0x28, r0, 0x8, &(0x7f0000000c40)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x6, &(0x7f0000000f80)=[r2], &(0x7f0000000fc0)=[{0x0, 0x1, 0x1, 0xa}, {0x3, 0x1, 0x0, 0xb}, {0x5, 0x4, 0xf, 0x1}, {0x30, 0x4, 0x4, 0x8}, {0x0, 0x5, 0xc, 0xc}, {0x0, 0x5, 0x8, 0x2}], 0x10, 0xbe3}, 0x90) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2d, 'blkio'}, {0x2b, 'blkio'}, {0x2d, 'cpuset'}, {0x2d, 'cpuacct'}]}, 0x1f) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r4 = openat$cgroup_ro(r0, &(0x7f0000000200)='memory.swap.current\x00', 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2b, 'cpuacct'}, {0x2d, 'net'}]}, 0xe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0xe, 0x0, &(0x7f0000000140)="3c56d79e2a63b843cb04436733f9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 1659.059331][ T633] netlink: 'syz-executor.4': attribute type 16 has an invalid length. [ 1659.258143][ T633] netlink: 64138 bytes leftover after parsing attributes in process `syz-executor.4'. 06:34:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff003}], 0xf, 0x0, 0x41f00, 0x7000000}}], 0xa900, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x10000a006) [ 1663.063480][ T28] audit: type=1804 audit(1704695681.824:994): pid=657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir339840382/syzkaller.xArHKo/1343/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 06:34:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x58, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x1e, 0x34, @random="9a101e3fbe2b62c56b2261a16d7f9820af45f01de24582c6d0cd"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x58}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x58, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x1e, 0x34, @random="9a101e3fbe2b62c56b2261a16d7f9820af45f01de24582c6d0cd"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x58}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async) 06:34:43 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4870000000000000200000000000e0ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f55ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf3ed410f6accd3641110bec4e90a634199e07f8f6eb9604000e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e468eea13c9a77e1c89c5082a703fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea7042ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850bf895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2200af6c7784a1975fabc0c4dd418c005479ecab19bdfb15a32a4fd67ce446adb431d7e74853b7978639be2463308af07db79240acaf0910300000077d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061622718551c20ec23812770d72c700a44e113d17088fdd00600000f7889b8d7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f740586903500090000000000000000be34b10f9d640dd782ac0cbc0abcf72846903243d0d0f4bc7fb0a0d7c5000032daaf281c450e64c33aac8ff7e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b4bfaf5a6b649dd5f13cd776e6c7c4b5c4b0de20e0c81efb5e392a13cdd2ce219e6733b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e863fef0ad9d1ac32276cffe5f1fc21390797d0244cf1ce269d10525745caaa3f77d1b80116cb385a0242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2424ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd911e0e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f55136628090702f70000d0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c685492a1689ad4218cea744b332ab232a09cf1ec375627074ce2d3d7619936768a84a1465fff4610cf8838b28319e0f79533d87eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f278ea00cee8a2088359946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df0000000010c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481c55e86dcd7816ad8940bd19953603000000adeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016be64dc097982e23462392a0cd05afb2e060fd6424a942ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1af45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5d81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b1495213060000000000000049584655c4fce8c5bb7c54664aef6d780100358aa54bcb49926c4be9ee4659153d9fa95d07cc4efdab2c355efe8e8d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6122f572047ccf3c8edd82660e5d74c52be71d780c30000000000fd00000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f2def52394db3e9d8318bbb9baff3db95bfd69e08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d05b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0a832f5194ddfce51e5aff28f621bb2fd2a5ab719df823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f1287552e0c8cdb326c5118d2e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e26aa90c571fa3c07238697b13c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170e42f28cea4105541e11c8605628b9ca935bc252fee8b596a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babb8fa16f3182c5b98493a5aa943aa3a777a751f56e0c7a74f7f63d83ff119561acd5fe560563b051dc29ac586b21148ad5a5498369ac347d19660c132b1df58d65418bc824d8b88b699462c2ce6524eaf0905445413033f041a26b189f2553ef218eba22152a4dc979a0e37396ae1a2883b1e4d44c8af7973d5c1f286c26459209db5a9a51dc69d0ba3fb6c884e50be3598ac53295137c97dabe52d98fed0b352c0b68b7e75ed59931ef57bb5fc28d5b1f914fc8abbb444637a5dfbac5035eb0713efb823360a8da80e4265e599f76952a8082b8c5f7890275a922cd2ccaaf75dcca6849e89e1bab32fe9b598c60407e4c21d7565dc6ab0a6d43b60f8d08ddf27a286807692d18973edaa6d5401c79b3cafaab4a8d6c946cbe5de350000000022e16a5f72c6d41dc9de8517fdcfa0c0efca880257443cfc3057c353569ffb1588b4bb261a6e99c5936e1b4339d87ec84db99e797f44451fc6b5da1950d24b3d4118f2288804740e605500c1f493c7dc42164cc6c1b01a329ce95272a07a355d4ba705b5e71ce5e1042a0c638e565881e5eedbc62f79407b73ae787c9cdb752eda44aeef962c93ab245f61e8ca5c0d41cc56124840f1b2b30be599fea0afaf905f90dd3e55fef0b94afbfd7144b7"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x34, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x18, 0x19, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@tail_call, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x1ff, 0x60, &(0x7f0000000bc0)=""/96, 0x41000, 0x18, '\x00', 0x0, 0x28, r0, 0x8, &(0x7f0000000c40)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x6, &(0x7f0000000f80)=[r2], &(0x7f0000000fc0)=[{0x0, 0x1, 0x1, 0xa}, {0x3, 0x1, 0x0, 0xb}, {0x5, 0x4, 0xf, 0x1}, {0x30, 0x4, 0x4, 0x8}, {0x0, 0x5, 0xc, 0xc}, {0x0, 0x5, 0x8, 0x2}], 0x10, 0xbe3}, 0x90) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2d, 'blkio'}, {0x2b, 'blkio'}, {0x2d, 'cpuset'}, {0x2d, 'cpuacct'}]}, 0x1f) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r4 = openat$cgroup_ro(r0, &(0x7f0000000200)='memory.swap.current\x00', 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2b, 'cpuacct'}, {0x2d, 'net'}]}, 0xe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0xe, 0x0, &(0x7f0000000140)="3c56d79e2a63b843cb04436733f9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 06:34:43 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0xc011) 06:34:44 executing program 3: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x300, 0x0, 0x1f00000000000000}, 0x1f00) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write(r6, &(0x7f0000000180)="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", 0xffc) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4c8, 0x1c0, 0x370, 0x370, 0x370, 0xe8, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, &(0x7f0000000280), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x16}}, @inet=@rpfilter={{0x28}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4e21}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xffffffff, 0x0, 'bond_slave_0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x2e, 0x1}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x90c, 0x42, 0x1, 0x1}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x1f}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x40, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) 06:34:45 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x2b, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000208500000083000000bf0900000000000055090100000000009500000000000000dd8601006bcb000018200000", @ANYRES32, @ANYBLOB="000000000004000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000005a00c0010000000850000003e00000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000006d070000080000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000008000008500000006000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x1}, 0x90) 06:34:47 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0xffffffffffffffff, 0x0) 06:34:48 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002e40)={0x1d, 0x3, &(0x7f0000002a80)=@framed, &(0x7f0000002ac0)='syzkaller\x00', 0x2}, 0x90) 06:34:48 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x58, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x1e, 0x34, @random="9a101e3fbe2b62c56b2261a16d7f9820af45f01de24582c6d0cd"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x58}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:34:48 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000080)=""/4057, &(0x7f0000001140)=0xfd9) 06:34:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0xffffffffffffffff, 0x0) 06:34:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) 06:34:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000080)=""/4057, &(0x7f0000001140)=0xfd9) 06:34:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0xffffffffffffffff, 0x0) 06:34:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x60, r3, 0xf99f2c5e591e93a6, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x51b}}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000801}, 0x4020010) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000100010882848b960c121824f570b16563e30c6a28f001e96a2f349ab31b6530132923c1898e98ee8230c8d3b7ef368884c0abe9dbd4d35a4bf83261f43142c74bf95954bc21b8e4034a9885cb2f1ce9bc5dd6fe11fe16b7e3e83aae4f251ca957ecaecfde33c13f8601fc5cf0be51b6f9274b498f3091f0f5b5f1865a80d6f7bd5d98dbb6598712cb6204fc5438c062219ae8a2d31fb6f1589692416cfb5f24201a8dfc66df59cffa3fac21ac08ae7f5e1a293cafb80d9f0863c3b338f63e53d3f535600fe467477a0619c9588691422817ef0449db257473"], 0x28) 06:34:52 executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xf, &(0x7f00000001c0)=@ringbuf, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000340), 0x6a8}, 0x90) 06:34:52 executing program 3: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x300, 0x0, 0x1f00000000000000}, 0x1f00) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write(r6, &(0x7f0000000180)="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", 0xffc) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4c8, 0x1c0, 0x370, 0x370, 0x370, 0xe8, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, &(0x7f0000000280), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x16}}, @inet=@rpfilter={{0x28}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4e21}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xffffffff, 0x0, 'bond_slave_0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x2e, 0x1}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x90c, 0x42, 0x1, 0x1}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x1f}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x40, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) 06:34:53 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000600)=0x10) [ 1674.267399][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.278187][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 06:34:53 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000080)=""/4057, &(0x7f0000001140)=0xfd9) 06:34:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0xffffffffffffffff, 0x0) 06:34:54 executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xf, &(0x7f00000001c0)=@ringbuf, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000340), 0x6a8}, 0x90) 06:34:55 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000600)=0x10) 06:34:55 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000080)=""/4057, &(0x7f0000001140)=0xfd9) 06:34:56 executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xf, &(0x7f00000001c0)=@ringbuf, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000340), 0x6a8}, 0x90) 06:34:57 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0) setsockopt$ax25_int(r0, 0x101, 0xe, &(0x7f0000000000)=0xd, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x4, 0x7, 0x9}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x6, r5}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x2c, 0x65, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffff, 0xffff}, {0x7, 0x9}, {0x9, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xff}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000300)=0x300, 0x4) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000180)={0x3, @default, 0xee00}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r6 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @netrom}, [@rose, @netrom, @null, @default, @default, @netrom, @bcast, @rose]}, &(0x7f0000000040)=0x48, 0x0) ioctl$SIOCAX25OPTRT(r6, 0x89e7, &(0x7f0000000140)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, 0x44}) 06:34:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async, rerun: 64) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async, rerun: 64) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x60, r3, 0xf99f2c5e591e93a6, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x51b}}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000801}, 0x4020010) (async, rerun: 32) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async, rerun: 32) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000100010882848b960c121824f570b16563e30c6a28f001e96a2f349ab31b6530132923c1898e98ee8230c8d3b7ef368884c0abe9dbd4d35a4bf83261f43142c74bf95954bc21b8e4034a9885cb2f1ce9bc5dd6fe11fe16b7e3e83aae4f251ca957ecaecfde33c13f8601fc5cf0be51b6f9274b498f3091f0f5b5f1865a80d6f7bd5d98dbb6598712cb6204fc5438c062219ae8a2d31fb6f1589692416cfb5f24201a8dfc66df59cffa3fac21ac08ae7f5e1a293cafb80d9f0863c3b338f63e53d3f535600fe467477a0619c9588691422817ef0449db257473"], 0x28) 06:34:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000001600)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0x3ee3}, {0x28, 0x0, 0x0, 0x80000000}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="83b540a9", 0xb583}], 0x1}}], 0x300, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x0, 0x3, "45f03ddbd8aa8987fe6255b1f0ce25722d4fbc3e175fdc7e099d8e96fb9e1684b3ce5ba5138c0597ab9dbe76c14ef51028ce0cbae0c1f2a920ddddc3faa3406091ba1969da904569a5ef5112d5b196a9c9326e7d3812d3d5ea0aa140"}}}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x0, 0x3, "45f03ddbd8aa8987fe6255b1f0ce25722d4fbc3e175fdc7e099d8e96fb9e1684b3ce5ba5138c0597ab9dbe76c14ef51028ce0cbae0c1f2a920ddddc3faa3406091ba1969da904569a5ef5112d5b196a9c9326e7d3812d3d5ea0aa140"}}}}]}, 0x38}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="2600010007", @ANYRES16=r6], 0xd) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r9}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @uid=r10}]}, 0x28}], 0x1}, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000003300), &(0x7f0000003340)=0x10, 0x180800) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003380)) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000003780)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80000) socket$nl_route(0x10, 0x3, 0x0) 06:34:58 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000600)=0x10) 06:34:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000ae40)={{0x14}, [@NFT_MSG_NEWOBJ={0x38, 0x12, 0xa, 0x0, 0x0, 0x0, {}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_DATA={0x24, 0x4, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xe237703d02b1e27e}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xae}]}}, @NFT_MSG_NEWTABLE={0x5c, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_USERDATA={0x45, 0x6, "d916b014e514b2f763aec0f837baab46ee4e6766ab99101caef06af0b5f5bedb9eebdfec95774044085ccfa97550ae9aa70ff8b4f461bfa25d004ad94905c350ba"}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x0, 0x0, 0x0, {0xa}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWSET={0x39c, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_SET_DESC={0x30c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3f}]}]}, @NFTA_SET_DESC_CONCAT={0x44, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0x34, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0x11c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3f}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3f}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0xd0, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7d06}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1000}]}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8}]}, @NFTA_SET_EXPRESSIONS={0x10, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @rt={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8}]}}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2a}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_HANDLE={0xc}, @NFTA_CHAIN_ID={0x8}]}, @NFT_MSG_DELSETELEM={0xa1c, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x9e8, 0x3, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_SET_ELEM_DATA={0x34, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_USERDATA={0x36, 0x6, 0x1, 0x0, "2d3ff3a334fe43098eb7a4a8d2845f9a42a52dae18d3e6d1001499820db2f4a498f888f5e80f0166597981dcd4602b73ec9c"}]}, {0x95c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x464, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x52, 0x1, "378c3b767206d3b8b67cb90f845c7085336cd6cd59f2148063dda6e6893bb71b24e5b5daa529461daee0e03a38f8557b460592c77c091771903077e17827860a42e2b4c02e2d41ef37d3878b6a1b"}, @NFTA_DATA_VALUE={0x85, 0x1, "e3347895c50a62f1b540b4e2d27ef836cdfe97ef3ebdbb5ccb82b1be0d3e2840dda9a88658c87b5c16676880300210c0bf7a42acfd0f6f0a181fecda2ed219e29e6f2a0c954d75e6c5846b79bf3ec79bbda37207548c5fc841c0d9462a6cabc2875d513c3693fc6214cee1d7851f732f814bb769bc795d3e877776b3783d8dc85b"}, @NFTA_DATA_VALUE={0xb5, 0x1, "129e9466cbb35d382c9bd19b2143b6ce224c79b7a0253545393f5238217c71e0f1c9a534fa2402a8b922548add9496e0f2f9006c067e279e12ea11f44d0b58ae1b4577d983be7df811e79f6b0a0ecd6a4d7a210c0208a484b766733186dab43922629ad488e1b54ec564ba3afde196ae77a96899208569d77a742cd3e19e566d28a538752c407d78430915e714a0de10c37e58cec2f0053044059facd1c32dfad0eab5e07257a19976b51a7b442fdadbf3"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x101}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xe6, 0x1, "e8b3048c1c805ff2131a94f7f1b3861dbfedb262ae1565964e37002c5c21aadbb24db6ccdee5e603e5df0c2759228ef72d3c583e0fdca1947c06cf1e55fedb20b0fb714f58f934a9343374ec3723df24e6dae4c919a940d67c7c5d7b6f1229a72dfbf36cb5e51ed5203913518034d03af9889f204c5908bba7493ace444af07fd61e94f0792a0f8a08304a673e25f202503660eb2667b5d4209c5df3aff74b5f7de86cfab419b1184ae8abe2ac4a97d0cf1592915c298740e7f66adffd5285df7e8e0dd2df06027dd5cd075e21b6dc10feb6a44d9d884023cd202e15cd0e2520f879"}, @NFTA_DATA_VALUE={0x49, 0x1, "34d9d0fd4f5ab17d2a5557700539857462b408bcc26fcfb61dd6459da9ef7ca21c54d0636a02ecb07d0af6bb5b3eccd9a9b340ca3d2af3d956e16a2442a0de0aca495c02d4"}, @NFTA_DATA_VALUE={0xad, 0x1, "d1dfe770eb5e33c56c0ca0eb7b47b0ec2a22186dffc44c1767e57a8cba0a3ebaa67456b5363b1870ee8953566cb599033c0bdbab045e12ca3476e4e22bdd8a1b2d8e876f41bf7d29faa9fd0ddb27f68e74fe4030d38ab74787540567eabf72003ca96759ca204f97832a92ae21f98ee5f7526ab592f4fe8d26ad66dac21747d6a7852afd6d26ef7b13bc9405d4af9a1e82ae2cf6d3053b3ab71d4281b9c684ff97903a916f0d9562e5"}, @NFTA_DATA_VALUE={0x6e, 0x1, "b440e4267ddad3c39230dcc6b095bda46a32570bd7e822195605a392931d164e62fca3432f350ca1e8dd2a32e0266786820ebdd214382675438c89e7a5b554a042453723fcb3268f7075a6e8e4df04b544ab464cfe4a95c63c174e1ea41da7f60627d1941159a7888668"}]}, @NFTA_SET_ELEM_KEY={0x4dc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9d, 0x1, "9df649ce2d904726be199887704a2e2dccf70c494009cf63ae69d25912ac30bb34750f293298f7bb70013174677b68189fb7f1d639661936d32f097a46fff2e0b523a80400d839186c34e6dd9bcdb7587277a8106d92eb133826cecee7120e6311b7ceda61ce2fcd2df57da66311bea7244b4db61da5f5fbf3263d567630a249862a37f36016a93fae0e21986adbd64cba54e7998d750981c2"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x100}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x77, 0x1, "0abd41724ce91d7b449b58fb12f1916ebf23dda21c58bb2f8d5781285da55cae201a140a9dfdfe06d89b9d8aa7c7d8244ba2658bf3413bb1146b57bfd0632aab2e12048d739da26eae05d1787475ba14e4a38d4fe9a15fc5af2e85ac57dd5281170561f548767a0a4c09479b9e34bf0a16f4be"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1000}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0x321, 0x1, "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"}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x4}]}]}], {0x14}}, 0xec4}}, 0x4044) 06:34:58 executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xf, &(0x7f00000001c0)=@ringbuf, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000340), 0x6a8}, 0x90) 06:35:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x60, r3, 0xf99f2c5e591e93a6, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x51b}}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000801}, 0x4020010) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000100010882848b960c121824f570b16563e30c6a28f001e96a2f349ab31b6530132923c1898e98ee8230c8d3b7ef368884c0abe9dbd4d35a4bf83261f43142c74bf95954bc21b8e4034a9885cb2f1ce9bc5dd6fe11fe16b7e3e83aae4f251ca957ecaecfde33c13f8601fc5cf0be51b6f9274b498f3091f0f5b5f1865a80d6f7bd5d98dbb6598712cb6204fc5438c062219ae8a2d31fb6f1589692416cfb5f24201a8dfc66df59cffa3fac21ac08ae7f5e1a293cafb80d9f0863c3b338f63e53d3f535600fe467477a0619c9588691422817ef0449db257473"], 0x28) 06:35:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000b03000000000000000000000110000000800000000000000000000003000000000400000002"], 0x0, 0x4e}, 0x20) 06:35:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000600)=0x10) 06:35:01 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0) setsockopt$ax25_int(r0, 0x101, 0xe, &(0x7f0000000000)=0xd, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x4, 0x7, 0x9}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x6, r5}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x2c, 0x65, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffff, 0xffff}, {0x7, 0x9}, {0x9, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xff}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000300)=0x300, 0x4) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000180)={0x3, @default, 0xee00}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r6 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @netrom}, [@rose, @netrom, @null, @default, @default, @netrom, @bcast, @rose]}, &(0x7f0000000040)=0x48, 0x0) ioctl$SIOCAX25OPTRT(r6, 0x89e7, &(0x7f0000000140)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, 0x44}) 06:35:03 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0) setsockopt$ax25_int(r0, 0x101, 0xe, &(0x7f0000000000)=0xd, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x4, 0x7, 0x9}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x6, r5}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x2c, 0x65, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffff, 0xffff}, {0x7, 0x9}, {0x9, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xff}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000300)=0x300, 0x4) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000180)={0x3, @default, 0xee00}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r6 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @netrom}, [@rose, @netrom, @null, @default, @default, @netrom, @bcast, @rose]}, &(0x7f0000000040)=0x48, 0x0) ioctl$SIOCAX25OPTRT(r6, 0x89e7, &(0x7f0000000140)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, 0x44}) 06:35:03 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0) setsockopt$ax25_int(r0, 0x101, 0xe, &(0x7f0000000000)=0xd, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x4, 0x7, 0x9}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x6, r5}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x2c, 0x65, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffff, 0xffff}, {0x7, 0x9}, {0x9, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xff}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000300)=0x300, 0x4) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000180)={0x3, @default, 0xee00}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r6 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @netrom}, [@rose, @netrom, @null, @default, @default, @netrom, @bcast, @rose]}, &(0x7f0000000040)=0x48, 0x0) ioctl$SIOCAX25OPTRT(r6, 0x89e7, &(0x7f0000000140)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, 0x44}) 06:35:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x6329}, @device_a, @device_b, @initial, {0x2, 0x22}}, @ver_80211n={0x0, 0x7ba7, 0x1, 0x3, 0x0, 0x1, 0x1}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x3a) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:35:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000000c0)='kh', 0x2}], 0x1}, 0x1) close(r0) 06:35:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000001600)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0x3ee3}, {0x28, 0x0, 0x0, 0x80000000}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="83b540a9", 0xb583}], 0x1}}], 0x300, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x0, 0x3, "45f03ddbd8aa8987fe6255b1f0ce25722d4fbc3e175fdc7e099d8e96fb9e1684b3ce5ba5138c0597ab9dbe76c14ef51028ce0cbae0c1f2a920ddddc3faa3406091ba1969da904569a5ef5112d5b196a9c9326e7d3812d3d5ea0aa140"}}}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x0, 0x3, "45f03ddbd8aa8987fe6255b1f0ce25722d4fbc3e175fdc7e099d8e96fb9e1684b3ce5ba5138c0597ab9dbe76c14ef51028ce0cbae0c1f2a920ddddc3faa3406091ba1969da904569a5ef5112d5b196a9c9326e7d3812d3d5ea0aa140"}}}}]}, 0x38}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="2600010007", @ANYRES16=r6], 0xd) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r9}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @uid=r10}]}, 0x28}], 0x1}, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000003300), &(0x7f0000003340)=0x10, 0x180800) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003380)) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000003780)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80000) socket$nl_route(0x10, 0x3, 0x0) 06:35:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000000c0)='kh', 0x2}], 0x1}, 0x1) close(r0) 06:35:07 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0) setsockopt$ax25_int(r0, 0x101, 0xe, &(0x7f0000000000)=0xd, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x4, 0x7, 0x9}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x6, r5}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x2c, 0x65, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffff, 0xffff}, {0x7, 0x9}, {0x9, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xff}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000300)=0x300, 0x4) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000180)={0x3, @default, 0xee00}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r6 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @netrom}, [@rose, @netrom, @null, @default, @default, @netrom, @bcast, @rose]}, &(0x7f0000000040)=0x48, 0x0) ioctl$SIOCAX25OPTRT(r6, 0x89e7, &(0x7f0000000140)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, 0x44}) 06:35:07 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0) setsockopt$ax25_int(r0, 0x101, 0xe, &(0x7f0000000000)=0xd, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x4, 0x7, 0x9}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x6, r5}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x2c, 0x65, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffff, 0xffff}, {0x7, 0x9}, {0x9, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xff}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000300)=0x300, 0x4) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000180)={0x3, @default, 0xee00}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r6 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @netrom}, [@rose, @netrom, @null, @default, @default, @netrom, @bcast, @rose]}, &(0x7f0000000040)=0x48, 0x0) ioctl$SIOCAX25OPTRT(r6, 0x89e7, &(0x7f0000000140)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, 0x44}) 06:35:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x6329}, @device_a, @device_b, @initial, {0x2, 0x22}}, @ver_80211n={0x0, 0x7ba7, 0x1, 0x3, 0x0, 0x1, 0x1}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x3a) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:35:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000001600)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0x3ee3}, {0x28, 0x0, 0x0, 0x80000000}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="83b540a9", 0xb583}], 0x1}}], 0x300, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x0, 0x3, "45f03ddbd8aa8987fe6255b1f0ce25722d4fbc3e175fdc7e099d8e96fb9e1684b3ce5ba5138c0597ab9dbe76c14ef51028ce0cbae0c1f2a920ddddc3faa3406091ba1969da904569a5ef5112d5b196a9c9326e7d3812d3d5ea0aa140"}}}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x0, 0x3, "45f03ddbd8aa8987fe6255b1f0ce25722d4fbc3e175fdc7e099d8e96fb9e1684b3ce5ba5138c0597ab9dbe76c14ef51028ce0cbae0c1f2a920ddddc3faa3406091ba1969da904569a5ef5112d5b196a9c9326e7d3812d3d5ea0aa140"}}}}]}, 0x38}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="2600010007", @ANYRES16=r6], 0xd) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r9}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @uid=r10}]}, 0x28}], 0x1}, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000003300), &(0x7f0000003340)=0x10, 0x180800) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003380)) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000003780)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80000) socket$nl_route(0x10, 0x3, 0x0) 06:35:09 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0) setsockopt$ax25_int(r0, 0x101, 0xe, &(0x7f0000000000)=0xd, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x4, 0x7, 0x9}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x6, r5}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x2c, 0x65, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffff, 0xffff}, {0x7, 0x9}, {0x9, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xff}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000300)=0x300, 0x4) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000180)={0x3, @default, 0xee00}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r6 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @netrom}, [@rose, @netrom, @null, @default, @default, @netrom, @bcast, @rose]}, &(0x7f0000000040)=0x48, 0x0) ioctl$SIOCAX25OPTRT(r6, 0x89e7, &(0x7f0000000140)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, 0x44}) 06:35:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000000c0)='kh', 0x2}], 0x1}, 0x1) close(r0) 06:35:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000000c0)='kh', 0x2}], 0x1}, 0x1) close(r0) 06:35:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x6329}, @device_a, @device_b, @initial, {0x2, 0x22}}, @ver_80211n={0x0, 0x7ba7, 0x1, 0x3, 0x0, 0x1, 0x1}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x3a) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async, rerun: 64) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (rerun: 64) 06:35:13 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0) setsockopt$ax25_int(r0, 0x101, 0xe, &(0x7f0000000000)=0xd, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x4, 0x7, 0x9}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x6, r5}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x2c, 0x65, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffff, 0xffff}, {0x7, 0x9}, {0x9, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xff}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000300)=0x300, 0x4) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000180)={0x3, @default, 0xee00}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r6 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @netrom}, [@rose, @netrom, @null, @default, @default, @netrom, @bcast, @rose]}, &(0x7f0000000040)=0x48, 0x0) ioctl$SIOCAX25OPTRT(r6, 0x89e7, &(0x7f0000000140)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, 0x44}) [ 1694.671746][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 06:35:13 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0) setsockopt$ax25_int(r0, 0x101, 0xe, &(0x7f0000000000)=0xd, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x4, 0x7, 0x9}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x6, r5}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x2c, 0x65, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffff, 0xffff}, {0x7, 0x9}, {0x9, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xff}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000300)=0x300, 0x4) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000180)={0x3, @default, 0xee00}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r6 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @netrom}, [@rose, @netrom, @null, @default, @default, @netrom, @bcast, @rose]}, &(0x7f0000000040)=0x48, 0x0) ioctl$SIOCAX25OPTRT(r6, 0x89e7, &(0x7f0000000140)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, 0x44}) 06:35:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000001600)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0x3ee3}, {0x28, 0x0, 0x0, 0x80000000}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="83b540a9", 0xb583}], 0x1}}], 0x300, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x0, 0x3, "45f03ddbd8aa8987fe6255b1f0ce25722d4fbc3e175fdc7e099d8e96fb9e1684b3ce5ba5138c0597ab9dbe76c14ef51028ce0cbae0c1f2a920ddddc3faa3406091ba1969da904569a5ef5112d5b196a9c9326e7d3812d3d5ea0aa140"}}}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x0, 0x3, "45f03ddbd8aa8987fe6255b1f0ce25722d4fbc3e175fdc7e099d8e96fb9e1684b3ce5ba5138c0597ab9dbe76c14ef51028ce0cbae0c1f2a920ddddc3faa3406091ba1969da904569a5ef5112d5b196a9c9326e7d3812d3d5ea0aa140"}}}}]}, 0x38}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="2600010007", @ANYRES16=r6], 0xd) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r9}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @uid=r10}]}, 0x28}], 0x1}, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000003300), &(0x7f0000003340)=0x10, 0x180800) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003380)) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000003780)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80000) socket$nl_route(0x10, 0x3, 0x0) 06:35:14 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0) setsockopt$ax25_int(r0, 0x101, 0xe, &(0x7f0000000000)=0xd, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x4, 0x7, 0x9}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x6, r5}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x2c, 0x65, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffff, 0xffff}, {0x7, 0x9}, {0x9, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xff}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000300)=0x300, 0x4) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000180)={0x3, @default, 0xee00}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r6 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @netrom}, [@rose, @netrom, @null, @default, @default, @netrom, @bcast, @rose]}, &(0x7f0000000040)=0x48, 0x0) ioctl$SIOCAX25OPTRT(r6, 0x89e7, &(0x7f0000000140)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, 0x44}) 06:35:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000b80), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r2, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c054}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000500)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x58}}}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000009c0)={r0, 0xffff, 0x6, 0x2d29}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r7, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc080}, 0x90) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000540)=@data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x20}, @device_a, @device_b, @broadcast, {0x1, 0x1f}, @broadcast}, {0x1, 0x0, 0x0, 0x0, 0x1f}}, {@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1385}, @device_a, @device_b, @initial, {0x7}}, {0x4, 0x0, 0x2, 0x1, 0x7}}}, @ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, @random="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"}, 0x3e6) 06:35:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000001600)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0x3ee3}, {0x28, 0x0, 0x0, 0x80000000}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="83b540a9", 0xb583}], 0x1}}], 0x300, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x0, 0x3, "45f03ddbd8aa8987fe6255b1f0ce25722d4fbc3e175fdc7e099d8e96fb9e1684b3ce5ba5138c0597ab9dbe76c14ef51028ce0cbae0c1f2a920ddddc3faa3406091ba1969da904569a5ef5112d5b196a9c9326e7d3812d3d5ea0aa140"}}}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x0, 0x3, "45f03ddbd8aa8987fe6255b1f0ce25722d4fbc3e175fdc7e099d8e96fb9e1684b3ce5ba5138c0597ab9dbe76c14ef51028ce0cbae0c1f2a920ddddc3faa3406091ba1969da904569a5ef5112d5b196a9c9326e7d3812d3d5ea0aa140"}}}}]}, 0x38}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="2600010007", @ANYRES16=r6], 0xd) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r9}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @uid=r10}]}, 0x28}], 0x1}, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000003300), &(0x7f0000003340)=0x10, 0x180800) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003380)) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000003780)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80000) socket$nl_route(0x10, 0x3, 0x0) 06:35:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 06:35:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0x11, 0x0, "0ae709b6757899dd39600cf0a34ee243aebbe23aa9657c1e2b4189f3a77d0f2e7cdbac6d41e2141a1e7b1c32d1d3890e9de55e54470812e8874b0284aadef03690ea70aa0012a386068d4260c2282321"}, 0xd8) 06:35:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0x4, 0x1, @local}]}, 0x40}}, 0x0) [ 1702.847806][ T867] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 06:35:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x14}, 0x14}, 0x6}, 0x0) 06:35:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x673d5b49}) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xd001}) 06:35:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000b80), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r2, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c054}, 0x40000) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000500)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x58}}}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000009c0)={r0, 0xffff, 0x6, 0x2d29}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r7, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc080}, 0x90) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000540)=@data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x20}, @device_a, @device_b, @broadcast, {0x1, 0x1f}, @broadcast}, {0x1, 0x0, 0x0, 0x0, 0x1f}}, {@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1385}, @device_a, @device_b, @initial, {0x7}}, {0x4, 0x0, 0x2, 0x1, 0x7}}}, @ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, @random="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"}, 0x3e6) 06:35:22 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x4, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) 06:35:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000001600)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0x3ee3}, {0x28, 0x0, 0x0, 0x80000000}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="83b540a9", 0xb583}], 0x1}}], 0x300, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x0, 0x3, "45f03ddbd8aa8987fe6255b1f0ce25722d4fbc3e175fdc7e099d8e96fb9e1684b3ce5ba5138c0597ab9dbe76c14ef51028ce0cbae0c1f2a920ddddc3faa3406091ba1969da904569a5ef5112d5b196a9c9326e7d3812d3d5ea0aa140"}}}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x0, 0x3, "45f03ddbd8aa8987fe6255b1f0ce25722d4fbc3e175fdc7e099d8e96fb9e1684b3ce5ba5138c0597ab9dbe76c14ef51028ce0cbae0c1f2a920ddddc3faa3406091ba1969da904569a5ef5112d5b196a9c9326e7d3812d3d5ea0aa140"}}}}]}, 0x38}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="2600010007", @ANYRES16=r6], 0xd) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r9}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @uid=r10}]}, 0x28}], 0x1}, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000003300), &(0x7f0000003340)=0x10, 0x180800) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003380)) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000003780)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80000) socket$nl_route(0x10, 0x3, 0x0) 06:35:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) 06:35:24 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 06:35:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000b80), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r2, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c054}, 0x40000) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async, rerun: 64) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async, rerun: 64) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async, rerun: 32) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000500)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x58}}}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async, rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000009c0)={r0, 0xffff, 0x6, 0x2d29}) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r7, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc080}, 0x90) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000540)=@data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x20}, @device_a, @device_b, @broadcast, {0x1, 0x1f}, @broadcast}, {0x1, 0x0, 0x0, 0x0, 0x1f}}, {@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1385}, @device_a, @device_b, @initial, {0x7}}, {0x4, 0x0, 0x2, 0x1, 0x7}}}, @ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, @random="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"}, 0x3e6) 06:35:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x673d5b49}) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xd001}) 06:35:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x673d5b49}) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xd001}) 06:35:27 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @in6={0xa, 0x4e21, 0x0, @private2}], 0x38) 06:35:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5, 0x1, 0xb, 0x1, 0xa, 0xffff}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 06:35:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="48001d00", @ANYRES16=0x0, @ANYBLOB="040029bd7000fddbdf250300000008000500ff7f000008000400a100000008000600080000001c00038008000500ffffffff0800010001000000060007004e240000"], 0x48}, 0x1, 0x0, 0x0, 0x480d0}, 0x48014) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:35:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x673d5b49}) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xd001}) 06:35:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x673d5b49}) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xd001}) 06:35:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="b27728", @ANYRESOCT=r1], 0x18a3c85) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000de1e7edf5300001b00000006002100"], 0x1c}}, 0x0) sendfile(r3, r2, 0x0, 0xfffbffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 06:35:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000001600)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0x3ee3}, {0x28, 0x0, 0x0, 0x80000000}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="83b540a9", 0xb583}], 0x1}}], 0x300, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x0, 0x3, "45f03ddbd8aa8987fe6255b1f0ce25722d4fbc3e175fdc7e099d8e96fb9e1684b3ce5ba5138c0597ab9dbe76c14ef51028ce0cbae0c1f2a920ddddc3faa3406091ba1969da904569a5ef5112d5b196a9c9326e7d3812d3d5ea0aa140"}}}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x0, 0x3, "45f03ddbd8aa8987fe6255b1f0ce25722d4fbc3e175fdc7e099d8e96fb9e1684b3ce5ba5138c0597ab9dbe76c14ef51028ce0cbae0c1f2a920ddddc3faa3406091ba1969da904569a5ef5112d5b196a9c9326e7d3812d3d5ea0aa140"}}}}]}, 0x38}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="2600010007", @ANYRES16=r6], 0xd) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r9}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @uid=r10}]}, 0x28}], 0x1}, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000003300), &(0x7f0000003340)=0x10, 0x180800) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003380)) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000003780)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80000) socket$nl_route(0x10, 0x3, 0x0) 06:35:31 executing program 4: r0 = socket(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x6, 0xffffffb5, 0x10, @remote, @private0, 0x7800, 0x80, 0x10000, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x29, 0xb7, 0x9, 0x8c, 0x21, @mcast1, @empty, 0x20, 0x740, 0x410, 0x81}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)={0x22c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r2}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x19}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x7, 0xb7, 0x5}, {0x7f, 0x97, 0x3, 0xfff}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x22c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r4 = socket(0x11, 0x3, 0x3) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0x2, 0x1000, 0x6, 0x3, 0x8001]}, &(0x7f0000000080)=0x78) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0xd6, 0x6, 0x4df5df74, 0x4, @remote, @empty, 0x40, 0x1, 0x7, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x6, 0xffffffb5, 0x10, @remote, @private0, 0x7800, 0x80, 0x10000, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x29, 0xb7, 0x9, 0x8c, 0x21, @mcast1, @empty, 0x20, 0x740, 0x410, 0x81}}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)={0x22c, r6, 0x4, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x80, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x19}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x7, 0xb7, 0x5}, {0x7f, 0x97, 0x3, 0xfff}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x22c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @broadcast}, &(0x7f0000000240)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) r14 = socket(0x11, 0x3, 0x3) getsockopt$EBT_SO_GET_INFO(r14, 0x0, 0x80, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0x2, 0x1000, 0x6, 0x3, 0x8001]}, &(0x7f0000000080)=0x78) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r14, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0xd6, 0x6, 0x4df5df74, 0x4, @remote, @empty, 0x40, 0x1, 0x7, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r14, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x6, 0xffffffb5, 0x10, @remote, @private0, 0x7800, 0x80, 0x10000, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r14, 0x89f1, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x29, 0xb7, 0x9, 0x8c, 0x21, @mcast1, @empty, 0x20, 0x740, 0x410, 0x81}}) sendmsg$TEAM_CMD_OPTIONS_SET(r15, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)={0x22c, r16, 0x4, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r17}, {0x80, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r19}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x19}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x7, 0xb7, 0x5}, {0x7f, 0x97, 0x3, 0xfff}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}]}}]}, 0x22c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x2, 0xffff8000, 0x0, @empty, @empty, 0x7800, 0x7800, 0xfffffffe, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x29, 0x3f, 0x80, 0x3, 0x34, @dev={0xfe, 0x80, '\x00', 0xa}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x20, 0xc05, 0x5}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000480)={0x440, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x22}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff004}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r13}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8a}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r21}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}]}, 0x440}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback}}) 06:35:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x673d5b49}) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xd001}) [ 1713.691212][ T28] audit: type=1804 audit(1704695732.474:995): pid=934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3930108561/syzkaller.BqTn8d/1727/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 06:35:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x673d5b49}) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xd001}) 06:35:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="48001d00", @ANYRES16=0x0, @ANYBLOB="040029bd7000fddbdf250300000008000500ff7f000008000400a100000008000600080000001c00038008000500ffffffff0800010001000000060007004e240000"], 0x48}, 0x1, 0x0, 0x0, 0x480d0}, 0x48014) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="48001d00", @ANYRES16=0x0, @ANYBLOB="040029bd7000fddbdf250300000008000500ff7f000008000400a100000008000600080000001c00038008000500ffffffff0800010001000000060007004e240000"], 0x48}, 0x1, 0x0, 0x0, 0x480d0}, 0x48014) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async) [ 1714.929916][ T28] audit: type=1804 audit(1704695732.644:996): pid=932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3930108561/syzkaller.BqTn8d/1727/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 06:35:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="b27728", @ANYRESOCT=r1], 0x18a3c85) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000de1e7edf5300001b00000006002100"], 0x1c}}, 0x0) sendfile(r3, r2, 0x0, 0xfffbffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 06:35:35 executing program 4: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000014c0)={&(0x7f0000000c80)={0x2, 0x0, @remote}, 0x10, &(0x7f0000002540)=[{&(0x7f0000000cc0)="796be5b95ffc37b2831c46de06bd5199", 0x10}], 0x1}, 0x0) [ 1717.000244][ T28] audit: type=1804 audit(1704695735.784:997): pid=955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3930108561/syzkaller.BqTn8d/1728/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 06:35:36 executing program 4: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000014c0)={&(0x7f0000000c80)={0x2, 0x0, @remote}, 0x10, &(0x7f0000002540)=[{&(0x7f0000000cc0)="796be5b95ffc37b2831c46de06bd5199", 0x10}], 0x1}, 0x0) 06:35:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="48001d00", @ANYRES16=0x0, @ANYBLOB="040029bd7000fddbdf250300000008000500ff7f000008000400a100000008000600080000001c00038008000500ffffffff0800010001000000060007004e240000"], 0x48}, 0x1, 0x0, 0x0, 0x480d0}, 0x48014) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="48001d00", @ANYRES16=0x0, @ANYBLOB="040029bd7000fddbdf250300000008000500ff7f000008000400a100000008000600080000001c00038008000500ffffffff0800010001000000060007004e240000"], 0x48}, 0x1, 0x0, 0x0, 0x480d0}, 0x48014) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async) [ 1718.614190][ T28] audit: type=1804 audit(1704695737.354:998): pid=955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3930108561/syzkaller.BqTn8d/1728/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 06:35:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="b27728", @ANYRESOCT=r1], 0x18a3c85) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000de1e7edf5300001b00000006002100"], 0x1c}}, 0x0) sendfile(r3, r2, 0x0, 0xfffbffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 06:35:39 executing program 4: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000014c0)={&(0x7f0000000c80)={0x2, 0x0, @remote}, 0x10, &(0x7f0000002540)=[{&(0x7f0000000cc0)="796be5b95ffc37b2831c46de06bd5199", 0x10}], 0x1}, 0x0) 06:35:40 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5411, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x84, @empty, 0x4e20, 0x1, 'wrr\x00', 0x20, 0x8000, 0x47}, 0x2c) [ 1722.333856][ T28] audit: type=1804 audit(1704695741.094:999): pid=978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3930108561/syzkaller.BqTn8d/1729/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 06:35:41 executing program 4: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000014c0)={&(0x7f0000000c80)={0x2, 0x0, @remote}, 0x10, &(0x7f0000002540)=[{&(0x7f0000000cc0)="796be5b95ffc37b2831c46de06bd5199", 0x10}], 0x1}, 0x0) 06:35:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000540), &(0x7f0000000580)=@mgmt_frame=@reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xff}, @broadcast, @device_b, @initial, {0x0, 0xbfa}}, @ver_80211n={0x0, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x300, 0x7f, @broadcast, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0xe5, "035c33d4113b5b9ec5e528fabcb1604ce3a46450d495d8a99ddb3540d4e4056b157cc1a9f9039138ef75d8ff574db15085acf9361dfaac19b667ee12402f7135692c42c48f167d18eef481a4a17a1bc6e6eb9aef6dba3845f6f57eb64e2ba2d38ec0d24cde1492e28371fa73e6f543b6de419b084836c1271049c11a45001c4dd1c9505fbff723118a349e42e6287d38780586837c528fa7795b3f148647fde725e51841aa698dbaf6f392f1332830d0b8ca6207a6c36f081ef2b20c0dc7e378f828a66c41beb626bae4f6d2c51302da7384da678ec79f80ec614e964ad386c61ce1bae6d3"}, {0xdd, 0xa1, "0338968a5c64b23d143612f041a0a7aa572c9218ba3a43fd22f4e7dc65ca3e631b917f0240159204c1d05310e09739169372087a3ce158a1959bb6cf6f2aa9854a781aab2d8735990bded369b8e38282832363747b73b23097e6f93dbea9541a1c269190c817fede94501c39164063c7b1bd642e59025312765d06e1008588f9ec3b49afd827bb7e235d6eea90c7db05124162075a12c3ec664357957adaa45e16"}, {0xdd, 0xcf, "b35aa6a376a9db58b00fd5152e4ad7991f5784bdb5d8220353f448bba6226022b0ff2b1b61553fcfb705aba8a655cd393d00fb3ab8933cc900122b8da2e3fb178e36112dc65d1200a7d759b082a9b343949bde3e37955185c8e508b6282b5457f89ffa9e779a4ebccec9f602efd3eb8c745315af8ebf9a458452dee3ee54635baba91a07431f69c0235c5e1a16a49e8232a830e409d49fc2fd40acaa49bdd1310d938657203743c08b28fb5acbb0140af75ce8d69a41767c79453c86460910573aca09a997180b6decf84f67286747"}]}, 0x289) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:35:42 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) 06:35:43 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=0x1, r0, 0x2e, 0x0, 0x0, @prog_fd}, 0x20) [ 1724.992550][ T28] audit: type=1804 audit(1704695743.704:1000): pid=978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3930108561/syzkaller.BqTn8d/1729/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 06:35:44 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x2b, 0x1, 0x1) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001400110500000000000000002b"], 0x4c}}, 0x0) 06:35:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlinkprop={0x40, 0x10, 0xf8b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}]}}}]}, 0x40}}, 0x0) 06:35:45 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x7}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x4}, 0x10) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100), &(0x7f0000000100)=@udp=r2}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000003140)={r3, &(0x7f00000036c0), &(0x7f00000026c0)=@udp6=r2}, 0x20) close(r2) 06:35:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="b27728", @ANYRESOCT=r1], 0x18a3c85) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000de1e7edf5300001b00000006002100"], 0x1c}}, 0x0) sendfile(r3, r2, 0x0, 0xfffbffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 06:35:47 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)={0x1c, r0, 0x62d, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 06:35:47 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x7}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x4}, 0x10) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100), &(0x7f0000000100)=@udp=r2}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000003140)={r3, &(0x7f00000036c0), &(0x7f00000026c0)=@udp6=r2}, 0x20) close(r2) 06:35:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_int(r1, 0x28, 0x0, 0x0, 0x0) 06:35:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x38, 0x3, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x38}}, 0x0) 06:35:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) syz_80211_inject_frame(&(0x7f0000000540), &(0x7f0000000580)=@mgmt_frame=@reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xff}, @broadcast, @device_b, @initial, {0x0, 0xbfa}}, @ver_80211n={0x0, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x300, 0x7f, @broadcast, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0xe5, "035c33d4113b5b9ec5e528fabcb1604ce3a46450d495d8a99ddb3540d4e4056b157cc1a9f9039138ef75d8ff574db15085acf9361dfaac19b667ee12402f7135692c42c48f167d18eef481a4a17a1bc6e6eb9aef6dba3845f6f57eb64e2ba2d38ec0d24cde1492e28371fa73e6f543b6de419b084836c1271049c11a45001c4dd1c9505fbff723118a349e42e6287d38780586837c528fa7795b3f148647fde725e51841aa698dbaf6f392f1332830d0b8ca6207a6c36f081ef2b20c0dc7e378f828a66c41beb626bae4f6d2c51302da7384da678ec79f80ec614e964ad386c61ce1bae6d3"}, {0xdd, 0xa1, "0338968a5c64b23d143612f041a0a7aa572c9218ba3a43fd22f4e7dc65ca3e631b917f0240159204c1d05310e09739169372087a3ce158a1959bb6cf6f2aa9854a781aab2d8735990bded369b8e38282832363747b73b23097e6f93dbea9541a1c269190c817fede94501c39164063c7b1bd642e59025312765d06e1008588f9ec3b49afd827bb7e235d6eea90c7db05124162075a12c3ec664357957adaa45e16"}, {0xdd, 0xcf, "b35aa6a376a9db58b00fd5152e4ad7991f5784bdb5d8220353f448bba6226022b0ff2b1b61553fcfb705aba8a655cd393d00fb3ab8933cc900122b8da2e3fb178e36112dc65d1200a7d759b082a9b343949bde3e37955185c8e508b6282b5457f89ffa9e779a4ebccec9f602efd3eb8c745315af8ebf9a458452dee3ee54635baba91a07431f69c0235c5e1a16a49e8232a830e409d49fc2fd40acaa49bdd1310d938657203743c08b28fb5acbb0140af75ce8d69a41767c79453c86460910573aca09a997180b6decf84f67286747"}]}, 0x289) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1730.555127][ T28] audit: type=1804 audit(1704695749.334:1001): pid=1011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3930108561/syzkaller.BqTn8d/1730/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 1731.197619][ T28] audit: type=1804 audit(1704695749.734:1002): pid=1021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3930108561/syzkaller.BqTn8d/1730/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 06:35:50 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 06:35:50 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x28011, r1, 0x0) ppoll(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:35:50 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x7}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x4}, 0x10) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100), &(0x7f0000000100)=@udp=r2}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000003140)={r3, &(0x7f00000036c0), &(0x7f00000026c0)=@udp6=r2}, 0x20) close(r2) 06:35:51 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r1) [ 1733.361934][ T1036] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 06:35:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async, rerun: 32) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (rerun: 32) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000540), &(0x7f0000000580)=@mgmt_frame=@reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xff}, @broadcast, @device_b, @initial, {0x0, 0xbfa}}, @ver_80211n={0x0, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x300, 0x7f, @broadcast, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0xe5, "035c33d4113b5b9ec5e528fabcb1604ce3a46450d495d8a99ddb3540d4e4056b157cc1a9f9039138ef75d8ff574db15085acf9361dfaac19b667ee12402f7135692c42c48f167d18eef481a4a17a1bc6e6eb9aef6dba3845f6f57eb64e2ba2d38ec0d24cde1492e28371fa73e6f543b6de419b084836c1271049c11a45001c4dd1c9505fbff723118a349e42e6287d38780586837c528fa7795b3f148647fde725e51841aa698dbaf6f392f1332830d0b8ca6207a6c36f081ef2b20c0dc7e378f828a66c41beb626bae4f6d2c51302da7384da678ec79f80ec614e964ad386c61ce1bae6d3"}, {0xdd, 0xa1, "0338968a5c64b23d143612f041a0a7aa572c9218ba3a43fd22f4e7dc65ca3e631b917f0240159204c1d05310e09739169372087a3ce158a1959bb6cf6f2aa9854a781aab2d8735990bded369b8e38282832363747b73b23097e6f93dbea9541a1c269190c817fede94501c39164063c7b1bd642e59025312765d06e1008588f9ec3b49afd827bb7e235d6eea90c7db05124162075a12c3ec664357957adaa45e16"}, {0xdd, 0xcf, "b35aa6a376a9db58b00fd5152e4ad7991f5784bdb5d8220353f448bba6226022b0ff2b1b61553fcfb705aba8a655cd393d00fb3ab8933cc900122b8da2e3fb178e36112dc65d1200a7d759b082a9b343949bde3e37955185c8e508b6282b5457f89ffa9e779a4ebccec9f602efd3eb8c745315af8ebf9a458452dee3ee54635baba91a07431f69c0235c5e1a16a49e8232a830e409d49fc2fd40acaa49bdd1310d938657203743c08b28fb5acbb0140af75ce8d69a41767c79453c86460910573aca09a997180b6decf84f67286747"}]}, 0x289) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async, rerun: 32) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async, rerun: 32) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:35:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000000901"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 06:35:53 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x7}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x4}, 0x10) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100), &(0x7f0000000100)=@udp=r2}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000003140)={r3, &(0x7f00000036c0), &(0x7f00000026c0)=@udp6=r2}, 0x20) close(r2) 06:35:53 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 06:35:54 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f000000aac0)='ns/pid_for_children\x00') [ 1735.631753][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.692073][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.701439][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 06:35:55 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @bcast, 0xee01}) [ 1737.254374][ T1050] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 06:35:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) clock_gettime(0x7, &(0x7f00000005c0)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r3 = accept(r0, &(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) r4 = accept(r0, 0x0, &(0x7f0000000600)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r5, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x4000080) clock_gettime(0x4, &(0x7f0000000780)) 06:35:56 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[], 0x78) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x78, 0x0) write$binfmt_script(r4, 0x0, 0xe9) write(r2, 0x0, 0x0) 06:35:56 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x140b, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) 06:35:56 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 06:35:56 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @bcast, 0xee01}) 06:35:57 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) [ 1740.003368][ T1070] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 06:35:58 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x140b, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) 06:35:59 executing program 1: writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000340)=0x2) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) 06:35:59 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @bcast, 0xee01}) 06:35:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 06:36:00 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 06:36:01 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x140b, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) 06:36:01 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) clock_gettime(0x7, &(0x7f00000005c0)) (async) clock_gettime(0x7, &(0x7f00000005c0)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r3 = accept(r0, &(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) r4 = accept(r0, 0x0, &(0x7f0000000600)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r5, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x4000080) clock_gettime(0x4, &(0x7f0000000780)) 06:36:01 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @bcast, 0xee01}) 06:36:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) 06:36:01 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021610020000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='ext4_writepages\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000240)='ext4_writepages\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x6000) [ 1743.048051][ T1086] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 06:36:03 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x140b, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) 06:36:03 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0xb, 0x5, 0x148, 0x128, 0x0, 0x248, 0x2a8, 0x2a8, 0x248, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @loopback, 0x0, 0x0, 'wg0\x00', 'nr0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_batadv\x00', {}, 'wlan1\x00', {}, 0x0, 0xbc}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@local, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'team0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ah={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="6f79fb339557"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) 06:36:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001080)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x260, 0x20a, 0x278, 0x260, 0x278, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'veth0_to_bridge\x00', 'macsec0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30, 'frag\x00', 0x2}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ipv6={@loopback, @local, [], [], 'macsec0\x00', 'ip6gretap0\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hl={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) 06:36:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@random="ddfbbca5ac98", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 06:36:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) clock_gettime(0x7, &(0x7f00000005c0)) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async) r3 = accept(r0, &(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) r4 = accept(r0, 0x0, &(0x7f0000000600)) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r5, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x4000080) (async) clock_gettime(0x4, &(0x7f0000000780)) 06:36:04 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x22}}, &(0x7f0000000480)='GPL\x00'}, 0x80) 06:36:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="03", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x20000094}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a00)=':', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x7}}], 0x44, 0x0) 06:36:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@random="ddfbbca5ac98", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 06:36:05 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000480)=@ethtool_gstrings={0x2f, 0x0, 0x5, "2a1947c74d"}}) 06:36:06 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de63cf771fa7e358e95d043c71a870cc00"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000000)={r0, 0x2000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 06:36:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x35, 0x701, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 06:36:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) 06:36:08 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000480)=@ethtool_gstrings={0x2f, 0x0, 0x5, "2a1947c74d"}}) 06:36:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="03", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x20000094}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a00)=':', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x7}}], 0x44, 0x0) 06:36:08 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@random="ddfbbca5ac98", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 06:36:08 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de63cf771fa7e358e95d043c71a870cc00"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000000)={r0, 0x2000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 06:36:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x35, 0x701, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 06:36:10 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000480)=@ethtool_gstrings={0x2f, 0x0, 0x5, "2a1947c74d"}}) 06:36:10 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@random="ddfbbca5ac98", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 06:36:11 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de63cf771fa7e358e95d043c71a870cc00"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000000)={r0, 0x2000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 06:36:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="03", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x20000094}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a00)=':', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x7}}], 0x44, 0x0) 06:36:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x35, 0x701, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 06:36:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) 06:36:13 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000480)=@ethtool_gstrings={0x2f, 0x0, 0x5, "2a1947c74d"}}) 06:36:14 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de63cf771fa7e358e95d043c71a870cc00"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000000)={r0, 0x2000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 06:36:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="03", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x20000094}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a00)=':', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x7}}], 0x44, 0x0) 06:36:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="03", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x20000094}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a00)=':', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x7}}], 0x44, 0x0) 06:36:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x35, 0x701, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 06:36:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async, rerun: 32) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) 06:36:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x34003, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:36:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="03", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x20000094}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a00)=':', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x7}}], 0x44, 0x0) [ 1759.258314][ T1191] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 06:36:18 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_DELCHAIN={0xa8, 0x5, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_USERDATA={0x29, 0xc, "6b2a9becfea6c4949985b2d0416f28620d61f3eaa253d81a6603f6177d6cd6ae4f9102c845"}, @NFTA_CHAIN_USERDATA={0x21, 0xc, "6a735ba62a5bece759b50e5e5433a5857bb3b8c2e5c93a1f74136338b6"}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_ID={0x8}]}, @NFT_MSG_DELSETELEM={0x1910, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18d0, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x18ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x18a0, 0xb, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8}, @NFTA_LOOKUP_SREG={0x8}, @NFTA_LOOKUP_DREG={0x8}, @NFTA_LOOKUP_DREG={0x8}, @NFTA_LOOKUP_SREG={0x8}, @NFTA_LOOKUP_DREG={0x8}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}]}}}, {0x1410, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1400, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8}, @NFTA_BITWISE_MASK={0x124, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbd, 0x1, "512f70291123dd8b95c450ea639cc1e12c04ce5a1c3b12d5e008fb05eeb8dbeee40a0a20ad17beff7a7c1b4087237491558b97e9787851220b27a7dc7fa858775273d923bf6819eae9a649e70fa7a5db92d35e282929002934292dc42aff737ac2ed94fb50d37feae17ea413cd7ed1a118d536ee7de50475b35547fa562ba726a90ade1ec970aef6ef90f666971c9622fa28b7507b7ef95603e3e0ad88569f8c12413c1a85927fc51c1f633868d5f4222c194645840b2366f1"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_BITWISE_MASK={0x12d0, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x49, 0x1, "4ec7b612039e66e03702c08e97f3fe23df8a7e712e53a73d71cc06a2c9825261a0b44b7a4910251ff3651e6f18a28a78886d0903bf27c8e224d36de124feec32dba1cd4496"}, @NFTA_DATA_VALUE={0xa5, 0x1, "9d1d06f90e3859d9dbe1ebe6f36e49a1d78e3829d464316f216d97f819a66b1dfa3dff22146071da58f50cd5c66ad0522a1bbeab85b108ad016bc0a50957fc9057aa7f402f4f19af6b5618e6b295aab451319735fa62a9e6ded826516a7520c31512a0ceb64af5ec1a8723a5ba929ffa259e2c9019bcdb92ec2149d70b8818e6284692f4f406edd4f771310e595f8758bdad0e03bec027869c0210589b9c50d9a3"}, @NFTA_DATA_VALUE={0x29, 0x1, "c7735b725208085611a31ccc4145627226f50021c64e6b20c6305e833a9ff49b9e0c85fc04"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0xa5, 0x1, "0895c0f13f5eff32fedd937514eeb7cceeee74375ab37c1c34df85df87e06d127534e6f3406fcf54aeac4ae952a91718fd6e4650fa8392111f5fd4c8151a55aa4c523e0b38fc8612148d7842d86c804d0fdf59d5b4c4ac5a228e5dfaba5ec208cf0e88ed42e7b3b8a3ec3972d11efcd7fa018df625cdc4d59af7dba4039b18386801eeaf03bf698d1cac576853f0c834f1390d0fae5c3a2044fbdaad181bc72c77"}, @NFTA_DATA_VALUE={0x1001, 0x1, "80ca31ebda4d49efb9e08475d4f96eeb0e7275a0b5cbc35b1b3b6c85741e570d26a375590ef42f5ad59e0d2bbc86fb0e375be306ace65ccd2754bb1fb5b292de8a9a3e59db6aee16315b9557f10da6151e91a4504961f85e08b1d4c7c90805185fce7dce54dea6c82457e53d82debc7d4fc1c8bc2c2999f5903ebaad141cd18059cef0ac00607893a4ff95cbe857c2b7af09101b8c3cec6a506a4ee6b66eb2eda36be4245d9b80daf5db293ef6944b6d665324c45273bc58813063ecee80be54fd7f685257dbaf3b2b832a410ac71915c79167def4c341cb53b812e4794a87a3a4dc10c341218f6492455a83ff98dc355bc2bf6bd67aca9cee5e4146913483eee1b9853f6d31a298c1e9cc4f660915b4959a51559094dfe9e9df7eb005edb54a7efa93be78c154db414482fe79692445e11d15a6676753b7b2924b1b2e7a472394d35df35e4782ada6ca8458c418ecd704520e99cb2d73f76d42ffb124335309884487a47110b0637ecfe1334a04a8f9b3fddb03ca59ba03e39439f6e1af94d5a466fc5ec74a9a96d83bb5de9c86dc320def7373bc609c9c068810fc7f5cdbee41b64b2c9b760021a66aed082418bb7dcb0bdf8bc9663041cc343a2971f572dee27b41dc9141623090dbe4df08225f43348560d564cc10962e6cf2fa96b87363ff1a3b7ff7f132881b4d3ba4f598a95c6cbaf6666e8e74ce70cb42e09514265478342e40b9e65a2372a223eda0b3c2e0e99c1848473d402a8504d07f070af64e2666b84e2d8b956de00eac43869fe590ef8196acf6e0c3428b4503eb8b96157bae340ededb59a161c761ee863c727522d0acef2520d64656675562d72383c16ca1363ee8e7151d2dd8f1b7d3aa931f617bfde53d70346bcb9eeb545651a211ce9d2857e9f7fab38fa2f1bff57cddbdcc30876ca8442317c1eb935a6b902e6466cd4b484eddab77cdf89cdf020a2672f980e606958e93d408d27b31b61029301a4c49d934696f2e5499b172bd072d73c1a0ab376e052a36f36f4b89f8fcdaa2b81224316035dd60b495c337da515870236d1035c7bbe35b82f36a34f213a8854dc850df5401ef6869aa9a093975e0818ca89df980b3753fdb54d58f116d5e07c06051ee6f24f6786badb045db47211fbde08e45ad126f57e825f2f3258d0e438a6c0045d8cd86455588e5c8038468cc713e6da0e559a5f590c009a77fbabf6057db56ec5c57c36e084033a4c9e038385606f38cce7cc7fe060c56a2bdc160dd9d5c0fbc5dfec40fad1020e9cebf76e7f2ecb2cfbe514bb26521ee0ced70c300529f8e7bcbf0c7d0bd8c6fec1f847d0668b9dbe5137c51a3e410f74d04355d30fa3e078a78a53ef753d8b4ae7cbbb922e318274da48d247311e9d2a7536c9c0317279c09feb89fc10e2e2429257fd80db0a78597edc0d17a673ca5c0b7372d47b1dab83cd13ebb0402ece073580acf265158a8dba8ba3231349ee4c37a2ee7bf6407ea798ac116a6cfb738b59734cda23b46c026523b348da6d7a0aadb93bb841ed71b0e3c9e44f772366197e9be376aaf456366b4664254b620cbc65e17aabd44a66cae59cbb3c96733e3f747337da049f3f49e339997edf40c11b3acd3d6865fbdbf42b95a1234df15b99a285da7f1cc1ff3bbb33ec1079af2130c7564d5f29527fa91aa17f3ad7ac710744960e6e6d1ff8fb49ca1371e3712ef460fa345e9a89ff7c3cc28997e7bd6c8cbf89755bfacf82345faac100a963e2d0b001ecc87c00c6f11449e41b41503a8c824302a68349f94444e21cf61aca28890b954e33fdafbf0d47599389f72031ca8cadeaa26c797e04dcb6412c4d77d1d9784813be9729a32dd4518e987cae610a2cba8a1a85f103f587eb5f709151a4031b271d685b46077215b309ce8226a0e7afc3403dff12e0de3c91ffac6eadd6b53aa914384320025b868a4cfacfe502a043b3f993665e29fed61cf0a8f1d3dc2f565a53a3e009ae163c22a12029ba552ecfacdf39467ee026d5428b1fb59d108df2837a0325ecc65cb893984179080bb1690de31473003c7e0ea500d836d836e8f2f09c03ec127ebec0b5f103f5e6bb7b82748db9cf09b2bc6409327a08ad278858d5974f31cbbb48143bebcbd1ab628fbcb7606bf7472db2e629050a6d604109638e8317c08c31a603515f28dee1b8fa814365a4cf9b5e10350c63c1cb06a5120de280ea465cf2258f2095c659d8c2b99523da41f029ae7d66a698bfb709d8d630e68abb8d0fc193d101e7606373a4466b08b7e862d39f765e12daa0325c82ac6b22a7bb5b9aa6bde218524fcb2cb50c35e79b895dcdbdbcd729bd5044ae314a53222fefd3e4f5b2aaf7775da4656f35a2932487684c1c0349ff7b7b8da3b502e80b651126c82fc3e0b98202432ba68f19d5fa15078c1331932cb8e3a375b46192e3b9b76ed9db121ab9d1975b7517ab5c2aca90a31b6c61f85a24d054c6f1e638cfecf3a59b0dde42052c806b5446ca1e2354a41120f7767c005c657b02ec39e60a0689be66f038546563dca6de67859f61fce027b9777b7026c342a9fdd629f4b5a2002ebf178ad2cea44b7f279364ab733e7ba9d88141c050314f2a4ca972bb81fc4642b71ab2c74ab1ea1fe1965b19439d0e0586541685fdf8022a9c0cbfeba94cb59821d0e6cfe1acc1d074270f4a45c50424d9af737433449fc79d063d44599632b2f0eb821e55c229fea5a85df4dd4cb5e0d7da8dadfa7808bf48788a6cc00b8fcd6fbe21c653bdfda23e9b64d62849643417965c55e065e0a019d0e1383e1e4d4509d799bbd01778c8b625f8259c77200588c8a13f1b52c36b37947df5bfdeaaaa51319884a98a5e8aa9e5c1830809236285b1d320dd24d21d8be2494d88367a80e77db01a1441c56d76b44547c91e7999fae4feed653daab4edc76a862b75d90296783821612ac929557968ae726f6119e16b8b841548bcf896bfec4a32c260376510a58dbc2c12ea9cdc662a2bede38d7069f0ebdc552f4a50eb09e9ac6b5d9a372c5767e516c6e3e3868df3515e0c50e63215f323a367d8858634f1cb201b5126ff3ea419f99e688a569b611eab865c517e5228a7157933c77be9447f98d9b5a27bbb8f855aeb8c639ed38314b87e536ce61c4490f3f05a24daf6977dd3a50edad58874a820211d551616c8d3b76c1af2c6bec379205c16f9f0792a458c4b150b3b6398b668f738da7d37112a3746f6b6648b87f02507f24faccdccf8292feb8249a29ca2df67fdc40b0c2f479d3df6a41910dcc2f7f54b11e85728f1707d53650d0fa8befc991fcc99139540bc28f46f08609256417f802b3ba2288b6614fc17bfbd80b095a4113f60ce1f9ed6d3913eeb9ca5ea219715d6c6b26030b59c4a8db8ce564fa90c0db1e67a7bd68c831711b2ac7e3b27c0c4ba1d7b33a5517ccb686114d4977f229f6bea21a83046d9e3e278cf9ed55923eb120d121d5d64fe3d7704459cea91356ada22953cd18dae5019b901a98797857789137a8cdfda40903443b5fde162c4647134254c5c82087eae5e49cbb947f7ce13926a605f166a6cf674d51485932ef1cf57e546670b6d22ff88d96e10cf284fb154d9f71caa04b6b4d82adf45fdc7369db482e6165c6d3781eeaf92f2937f71ceb5434a3d84e247ce3dd4e0e44bb0ab611a1df3a01185f61c064c1b0b8267d0a44a8ed363fb667a35f78d1a1ca4cc2975fcceba21bec89abdeae08ab582b32ff378ae56560967cb1eeef5a0e7bf8f1dda1c0e7b7eba4f973f7c962393fa6de9c52c6ca5f1bf8f299f49d41da8f451164e12bbfda3066b5e26e3f53a1d4467c95f5824647aa07e4f0487f68bbae843b0b778373dfb30f27ea767f011f219eb8645e40c31982f17d58c7120e6c05e7b68fe0716cbdadc2b26d24a36d9a1593b49faa625f06c77e32f7decf253c557b07214bef3791bd562bbeb58ad8c2a0ed6e67da89c64ef30c11faeab186eb8fc4b8bee94e7eeaf8b0d619cc12ccbd33657fc11945bf0c9bb5b481d1a6357c323b0d497d57e26f1a99fd50e7d014e114062baabda34637feb2691318faf028402cb324deb5bb90abae21cdeb18f8d3f24a71bd633c9b6e3419a5ae46077835a1d80873b0f97f5e384000be42fbbc898ecfa910621450ffbfc0da4a43f1555203d0a3a82e8b1bd621aa3ee21ffec2a5f28847c51f04b4753b802731dd474a5dfc165a72a1d67c34b5e31ad2aa12de0ad520e1a7769e867e3978b703775ce4fcb0e27ad7cc05fe2be2b46298828ff5c1e91233586794abc2d57979397f72ede58d3e897341c5e6637465bc5a84d7bc7bce942d27f36dc40de1a12e9c030f5981d5f69a10912d56de28d80dad8a0549ff63e63d49f5911b7c8e02b31b542cf0e2e97aad92036d0a872d23a099666d61cafbaf1c466f245dd3d6c169649d39196e1303232028120ab6eed1e161a1aedcfc1ac427c8717d268530f6196f4f990d58af66b44d05929d01350892c4993f37a26d98f5f3c7e49d57ac5dbde49c900a01459986bbb1414e51171f229aae04a20e7880dbe7501bc25b8c884d9e5bf1a08df2b41fa7910ba6cf62c52c06dfe5f2a3882f1592fd863bdcca319409c104215903c6fd83685e56722232ecaeccd99523a38f7fcc9e96641924d44d5736c3698506fb761483266edb288b5ce878d214c22b0ad37ef6880d906b585605d9ed936bff099fa4aa664d781c088ba41c052e7a1f8e5af9515446d9cfa530d4bf99724fe71a761eba614fc93e4170d8bfc2c605769e1957f56373d105601a7e688baab74502d16835a6b61a2a027f1eef75fbb95b816bfdaaef60fdc2ffcbcc13279a6bc1d3821017f0681f350710e6811c5640bd2e28cd92c49e39b6e98a636acebc69dd7be1734baa54b8f0aaada5b4b0721e077143445ef7794d0480333a959e2de23b2ba5b99c0cac6e09ae5639b754c493d8647183e32d79dbe90873720d581b947c91a2c68c7ce5741dcbf0d7047d8eaf29add76098b85d1532fd7d2fa0222c99f44637ad58ba6d86c363b76d56f9685b0d4ec09519389ca95c50bd3a30c32f10d8857c755573bcc273862a0017b8f8688be1b0164231e587f1d30b02000001de5d9a6627fe4f80288d323eb364b55a5b611a72deb265232443b87aef4aaca7544400125b1ddbc6e837c2ba9f562507784b722ac4d6fab497bc589e832d48f6d1b0f692fc2b00cd88d6cfac56d25d27fd52fe1c78a2326cf722e922651272fe3fbb6ac12b3a9d4ccc5c5682f0d0cc98b718fac15197a87d2a795a0f4adece1f85222b916c5669ad671fe6e2d4e9719b47a662f41737c391dd64231da6d2c4ac74fa8cb17715802eafe47bcc0cb245fb892d71856aab29d392d1daaf8c680e7ed348af6888a1e70a753554982b344231a419cf2d88c91a15f90e1101125ef6875b102cf552a0bf07ff6e88579d1f2367b83fee177afc914f87f4088feb043911fb2f8965197598a308badd82d8dc9623a46edc6605be6368a4fddb897576cd3a6157d82ef60520414cb09fa0f3c25e6fd35e187e09e32b6b31408dc7948cea900782eb17d52b2372d19f47fcbb885cc316600befe35072d99c2e07a46cf044ac0e18c91cd7daf1fcab3892c1e228d97875ded5c2b68fae6f522c77d5eb7c7b84debaea63f7f74dc3a72cf978febfd9887b078d283c5bb6667066ebb3f5fc83dd5c1b29730b079fe2c7e575099fc228056aa22259433cb4bae5986ede37db6eaed8040fe4d014ffe2c43c7f7f643cda2c86448cf4c7801b340ff5"}, @NFTA_DATA_VALUE={0xc1, 0x1, "88ca9476881ea7644ab967228a5fbf82afd97f1a9bf107e2fb65f53bb7e34ae2b5a3f6e2056c52e4df936993e93ba907e9fdd1d2aed505370d22fb082f18eba58abebf2be92c08b549df6edf2947af176d472ea1ca9d9d6dd9d0b6f26f4758db8ed47ca0eddfb86a8edf4c85531ce833015a0610ab64a5ab4afdbb893b20b0c732ee33d19b67cf6cba08214ba00e288ba7ce3dfe163f64b2820c8ecf2dbd75f130e0925596a614e6162c1183f3cf51e4ae39f1ace57fffcb7ca647b6ab"}]}]}}}, {0x434, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x424, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x1ac, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb1, 0x1, "08da1c12c168c0d5644d94e18880163c1b5faf037325c7d3c5607b7992295b1f4cc95d335c5f4fb1d6f84a302e8253f5d83c789f65a9cbcec4d6bf8d2554ed42c50a1c7d139784ec70fac55aaec9806cd3eeadaaf1c4e454cf4d60cdca74d747027047a2e86732eb11908be4db47e32a9d6241642cad49e7182d54d9d424f83e0ac8a7d6f63a3a74a56a0e0736a13826f50af9f31eabaf3670558b65cc27e2e8475693195e8182a54d4c76f2a9"}, @NFTA_DATA_VALUE={0x31, 0x1, "a9fd17ccf0529c76994358e231d65bacf7e65781acef7e4ac7df04a5446bfea38cd6f4fa140bfe87d634dc7aa3"}, @NFTA_DATA_VALUE={0xbd, 0x1, "d95c647d85c7fc8604020acd0c43617ddac616c56d45e48032c9ff3299f8780f7c073a20cf9772ea03f58a364795981bdc4250dbac8d1207db2a8751dfb136bd58c93c395654974a8937bbd766dcda125301979ee93fa8ce38fb7cc2c4f542d0de5f70ed39634c64cd45827e39a646b43679149362ef4a0ac91c58cac8f339a0625faf8fb156c667ad22cf6fabbedfd810a619ea3d4bb9cb2da388987d0970e3c1cb62f3cc5d88c32fca6155f9bc237ee929a327a81a215a00"}]}, @NFTA_RANGE_TO_DATA={0x26c, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xc9, 0x1, "223112fa428e3d2b7ed37650b0ac627e94daffeda17d6a0d5b24a0474c7a1e7a8482197f79d32247ab38c678ad32d8f7ef92a43e185f1e57a2c4606fae04afbc3922d13d9140e2f34900662f4f7c40d4defd812d205c7dac1dfc97580e52f6759d413e68768ead43549ef4da96bffa2ad07e4efa0e3d42209d8e54b519f4890aaefe20239a0a811e2182b629093e286de01688326a924c546741df2f71e71f50359168a5414361e5426ab6e9d898f323947c09cf04f1f98f57c4df4be117e242807d38107d"}, @NFTA_DATA_VALUE={0xf9, 0x1, "9184aabbff90aeacdc0ede327bdcaf5f4034068816340e464b3a17017962a7e7eff242dd3eb3c97be28a7c6cbdef2d43dcdcc7879755d424aaec64c1f532b56a036d0a49b5398f21bde628959f66a24d22fbc1edbc30c3fd2961f3b2a64c36cbc5e55988275eea7776af1e9f33da84acbaaf2bcc0d4755bae994110b7d3acc1381348435a8d5409c0dee37ab7d41f66641ae1ac37db3f7208f16a4950b13604973c50d102b415d01c4f5d9ecb9d11de69aa7b7e2852a24958e22d2d34bac7f562ddf5f4648aa5a56e1e8fafc950a2ba0dd11ac88e4c12ee7551149a912bd8fe1d458b382f635ebc3c19b8b891fed63ed2c5612df86"}, @NFTA_DATA_VALUE={0x45, 0x1, "ab90a7949946e5e6324c1839f364142ac049e3ced064872c3337445a174f163da712530c928f4c45ff6f9c45f73a80638c4a0f970d64383fe8747dd71c6780095d"}]}, @NFTA_RANGE_FROM_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}]}]}]}], {0x14}}, 0x1a10}}, 0x0) r0 = socket(0x10, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@private1, 0x0, 0x0, 0x4e20}}, {{@in=@empty}}}, 0xe8) write(r0, &(0x7f0000000240)="aefc00001a0025f00785bc04fef7681d020b49ff708800008003280008020100ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 06:36:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x3, 0xc3) bind$netrom(r1, &(0x7f0000000000)={{0xa, @null={0x40, 0x40, 0xe0, 0x40, 0x40, 0x40, 0x74}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null]}, 0x48) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000400), &(0x7f0000000540)=0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001008fc0ace0b4e3460006020202020202010882"], 0x36) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r5], 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)=@newqdisc={0x180, 0x24, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff7, 0xfff2}, {0x1, 0x5}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x159c}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7fffffff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x114, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xff, 0x40, 0x100, 0x1, 0x1, 0xfff, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0xff, 0x7, 0x30, 0xffff, 0x1, 0x37, 0xffffffff, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0xe0, 0x7f, 0x6, 0x8, 0x2, 0xb3, 0x8, 0x4}}, {0xc, 0x2, [0x8, 0x3e00, 0x81, 0x7]}}, {{0x1c, 0x1, {0x80, 0x6, 0xff00, 0x1, 0x2, 0x2, 0x0, 0x7}}, {0x12, 0x2, [0x3, 0x1, 0x0, 0x2190, 0x200, 0x8001, 0xc8bf]}}, {{0x1c, 0x1, {0x5, 0x81, 0x7, 0x3ff, 0x0, 0x5, 0x3, 0x4}}, {0xc, 0x2, [0x400, 0x57, 0x0, 0x63]}}, {{0x1c, 0x1, {0x1, 0x4, 0x8, 0x8, 0x1, 0x1, 0x80, 0x2}}, {0x8, 0x2, [0x7f, 0x8000]}}, {{0x1c, 0x1, {0x7f, 0x5, 0x0, 0xfffffffd, 0x2, 0x1, 0x819, 0x2}}, {0x8, 0x2, [0x2, 0xff]}}]}, @TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_qfg={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x180}, 0x1, 0x0, 0x0, 0x4040830}, 0x400c4) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="b000ddfffc011100000108021100000008021100000010002c9e7e7470c0cc14c8f8a86a87078500000200000002385be3d16daa1d05205d799eefcda9a4ca779eafcd4dbf4b79a584eddf5fbc2d073cfa2e929e381ee4400f81"], 0x1e) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xe4, r6, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010103}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0xc0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1760.621570][ T1199] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1760.952534][ T1199] netlink: 55838 bytes leftover after parsing attributes in process `syz-executor.0'. 06:36:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="03", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x20000094}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a00)=':', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x7}}], 0x44, 0x0) 06:36:20 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000000)=0x1) write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "77b704", 0x14, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) 06:36:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}}, 0x0) 06:36:20 executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40001) 06:36:23 executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40001) 06:36:23 executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40001) 06:36:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}}, 0x0) 06:36:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket(0x2, 0x3, 0xc3) (rerun: 32) bind$netrom(r1, &(0x7f0000000000)={{0xa, @null={0x40, 0x40, 0xe0, 0x40, 0x40, 0x40, 0x74}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null]}, 0x48) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000400), &(0x7f0000000540)=0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001008fc0ace0b4e3460006020202020202010882"], 0x36) (async, rerun: 64) r4 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r5], 0x2c}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)=@newqdisc={0x180, 0x24, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff7, 0xfff2}, {0x1, 0x5}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x159c}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7fffffff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x114, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xff, 0x40, 0x100, 0x1, 0x1, 0xfff, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0xff, 0x7, 0x30, 0xffff, 0x1, 0x37, 0xffffffff, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0xe0, 0x7f, 0x6, 0x8, 0x2, 0xb3, 0x8, 0x4}}, {0xc, 0x2, [0x8, 0x3e00, 0x81, 0x7]}}, {{0x1c, 0x1, {0x80, 0x6, 0xff00, 0x1, 0x2, 0x2, 0x0, 0x7}}, {0x12, 0x2, [0x3, 0x1, 0x0, 0x2190, 0x200, 0x8001, 0xc8bf]}}, {{0x1c, 0x1, {0x5, 0x81, 0x7, 0x3ff, 0x0, 0x5, 0x3, 0x4}}, {0xc, 0x2, [0x400, 0x57, 0x0, 0x63]}}, {{0x1c, 0x1, {0x1, 0x4, 0x8, 0x8, 0x1, 0x1, 0x80, 0x2}}, {0x8, 0x2, [0x7f, 0x8000]}}, {{0x1c, 0x1, {0x7f, 0x5, 0x0, 0xfffffffd, 0x2, 0x1, 0x819, 0x2}}, {0x8, 0x2, [0x2, 0xff]}}]}, @TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_qfg={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x180}, 0x1, 0x0, 0x0, 0x4040830}, 0x400c4) (async, rerun: 32) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="b000ddfffc011100000108021100000008021100000010002c9e7e7470c0cc14c8f8a86a87078500000200000002385be3d16daa1d05205d799eefcda9a4ca779eafcd4dbf4b79a584eddf5fbc2d073cfa2e929e381ee4400f81"], 0x1e) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xe4, r6, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010103}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0xc0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:36:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x128, 0x5802, 0x294, 0x0, 0x294, 0x288, 0x378, 0x378, 0x288, 0x378, 0x3, 0x0, {[{{@uncond, 0xf202, 0x108, 0x128, 0x52020000, {}, [@common=@frag={{0x30}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb401}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private0, [], [], 'team_slave_1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@mh={{0x28}, {"123a"}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 06:36:31 executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40001) 06:36:31 executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40001) 06:36:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}}, 0x0) 06:36:31 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x3, 0xc3) bind$netrom(r1, &(0x7f0000000000)={{0xa, @null={0x40, 0x40, 0xe0, 0x40, 0x40, 0x40, 0x74}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null]}, 0x48) (async) bind$netrom(r1, &(0x7f0000000000)={{0xa, @null={0x40, 0x40, 0xe0, 0x40, 0x40, 0x40, 0x74}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null]}, 0x48) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000400), &(0x7f0000000540)=0x4) (async) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000400), &(0x7f0000000540)=0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001008fc0ace0b4e3460006020202020202010882"], 0x36) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r5], 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)=@newqdisc={0x180, 0x24, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff7, 0xfff2}, {0x1, 0x5}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x159c}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7fffffff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x114, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xff, 0x40, 0x100, 0x1, 0x1, 0xfff, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0xff, 0x7, 0x30, 0xffff, 0x1, 0x37, 0xffffffff, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0xe0, 0x7f, 0x6, 0x8, 0x2, 0xb3, 0x8, 0x4}}, {0xc, 0x2, [0x8, 0x3e00, 0x81, 0x7]}}, {{0x1c, 0x1, {0x80, 0x6, 0xff00, 0x1, 0x2, 0x2, 0x0, 0x7}}, {0x12, 0x2, [0x3, 0x1, 0x0, 0x2190, 0x200, 0x8001, 0xc8bf]}}, {{0x1c, 0x1, {0x5, 0x81, 0x7, 0x3ff, 0x0, 0x5, 0x3, 0x4}}, {0xc, 0x2, [0x400, 0x57, 0x0, 0x63]}}, {{0x1c, 0x1, {0x1, 0x4, 0x8, 0x8, 0x1, 0x1, 0x80, 0x2}}, {0x8, 0x2, [0x7f, 0x8000]}}, {{0x1c, 0x1, {0x7f, 0x5, 0x0, 0xfffffffd, 0x2, 0x1, 0x819, 0x2}}, {0x8, 0x2, [0x2, 0xff]}}]}, @TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_qfg={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x180}, 0x1, 0x0, 0x0, 0x4040830}, 0x400c4) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="b000ddfffc011100000108021100000008021100000010002c9e7e7470c0cc14c8f8a86a87078500000200000002385be3d16daa1d05205d799eefcda9a4ca779eafcd4dbf4b79a584eddf5fbc2d073cfa2e929e381ee4400f81"], 0x1e) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xe4, r6, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010103}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0xc0) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xe4, r6, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010103}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0xc0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:36:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x13, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0)=[{{0x0, 0x2, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/18, 0x7ffff005}, {&(0x7f0000000240)=""/116, 0xfc29}], 0x2, 0x0, 0x1f000000, 0x1000000}}], 0x1, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="5292836bf9ef986aa94286f716ecd019a0", 0x11}], 0x1}}], 0x1, 0x0) sendfile(r3, r1, 0x0, 0x10000a006) 06:36:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}}, 0x0) [ 1774.762275][ T1257] ip6t_srh: unknown srh match flags B401 [ 1774.798412][ T28] audit: type=1804 audit(1704695793.584:1003): pid=1255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir102709967/syzkaller.A4hqKL/1778/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 06:36:33 executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40001) 06:36:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_DELRULE={0x14}], {0x14}}, 0x14}}, 0x0) 06:36:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x3c}}, 0x0) 06:36:33 executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40001) 06:36:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x6, 0xa, 0x8b) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000008c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x220, r3, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x220}, 0x1, 0x0, 0x0, 0x40}, 0x20048824) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000010) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params]}, 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000080211000001080211000000080211060000200001000000010001080904000000000000"], 0x28) [ 1776.602443][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 06:36:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0xa, 0x0, &(0x7f0000000080)) 06:36:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x2825}, @NFTA_LOG_GROUP={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 06:36:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)=ANY=[@ANYBLOB="e40b0000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080005000000000008000700050000000800070001000000080005000100000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5421400020077673100000000000000000000000000780b0880b000008008000a000100000006000500feff0000080003000100000014000400020000000a010100000000000000000008000300010000000600050000020000240001000000000000000000000000000000000000000000000000000000000000000000200004000a004e2300010001ff0100000000000000000000000000010000010024000200c6133bb38e459b694e3ce7ef8ae45ef9a0c54bf6e3453db46fedaad86c072112080003"], 0xbe4}}, 0x0) 06:36:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x6, 0xa, 0x8b) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000008c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x220, r3, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x220}, 0x1, 0x0, 0x0, 0x40}, 0x20048824) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000010) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params]}, 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000080211000001080211000000080211060000200001000000010001080904000000000000"], 0x28) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket(0x6, 0xa, 0x8b) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r0) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000008c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x220, r3, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x220}, 0x1, 0x0, 0x0, 0x40}, 0x20048824) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000010) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params]}, 0x3c}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000080211000001080211000000080211060000200001000000010001080904000000000000"], 0x28) (async) 06:36:39 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 06:36:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0xa, 0x0, &(0x7f0000000080)) 06:36:40 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 06:36:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket(0x6, 0xa, 0x8b) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000008c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x220, r3, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x220}, 0x1, 0x0, 0x0, 0x40}, 0x20048824) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000010) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params]}, 0x3c}}, 0x0) (async, rerun: 32) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000080211000001080211000000080211060000200001000000010001080904000000000000"], 0x28) 06:36:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@dev}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 06:36:42 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0xa, 0x0, &(0x7f0000000080)) 06:36:42 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"/4259], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, 0xffffffffffffffff, 0x36, 0x0, 0x4, @prog_fd}, 0x20) 06:36:42 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 06:36:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getneightbl={0x14, 0x42, 0x229}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e00)=""/4096, 0x2008}, {&(0x7f0000002e00)=""/4100, 0x1004}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x1, 0x92f, 0x14, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x0, 0x80, 0x0, 0x4000003}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r2, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x71, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x71, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_getnetconf={0x3c, 0x52, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x800}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}]}, 0x3c}}, 0xc004) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r7, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@ipv4_newrule={0x24, 0x20, 0x400, 0x70bd2c, 0x25dfdbff, {0x2, 0x80, 0x80, 0x0, 0x4, 0x0, 0x0, 0xf365ae227ddcf7d9, 0x1000c}, [@FRA_SRC={0x8, 0x2, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) 06:36:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)={0x48, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x91}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x41}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}, @NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000140600000008000300243bc70a37aa2ac9cd4c98562b6d7046b714fcc86f567478bbca80ae914dcf6eb8a6b78ba1c33b5c336d214c8396c9de2ad2f0ad36aea34e6b0a1d44d1f6507630ec25128edaa33c87961e9019c672ef57be44961fcbd9fab7195760ceeb017f2023950e48a8182f5e67fa44ffd038", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000006c0)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x3, 0x1, 0xb2}, @val={0x4, 0x6, {0x9, 0x8, 0x525, 0x2}}, @void, @void, @void, @void}, 0x41) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:36:45 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)='3', 0x1}], 0x1, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x30}, 0x0) 06:36:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0x12, 0x4) 06:36:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0xa, 0x0, &(0x7f0000000080)) 06:36:45 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 06:36:46 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000005d00)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0xb9080000}, {{&(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xff030000}}], 0x1c000, 0x0) 06:36:47 executing program 2: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5a8c", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="fe", 0x1}], 0x1}}], 0x2, 0x0) [ 1789.253579][ T1331] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 06:36:48 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) 06:36:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)={0x48, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x91}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x41}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}, @NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000140600000008000300243bc70a37aa2ac9cd4c98562b6d7046b714fcc86f567478bbca80ae914dcf6eb8a6b78ba1c33b5c336d214c8396c9de2ad2f0ad36aea34e6b0a1d44d1f6507630ec25128edaa33c87961e9019c672ef57be44961fcbd9fab7195760ceeb017f2023950e48a8182f5e67fa44ffd038", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000006c0)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x3, 0x1, 0xb2}, @val={0x4, 0x6, {0x9, 0x8, 0x525, 0x2}}, @void, @void, @void, @void}, 0x41) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)={0x48, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x91}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x41}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}, @NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000140600000008000300243bc70a37aa2ac9cd4c98562b6d7046b714fcc86f567478bbca80ae914dcf6eb8a6b78ba1c33b5c336d214c8396c9de2ad2f0ad36aea34e6b0a1d44d1f6507630ec25128edaa33c87961e9019c672ef57be44961fcbd9fab7195760ceeb017f2023950e48a8182f5e67fa44ffd038", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000006c0)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x3, 0x1, 0xb2}, @val={0x4, 0x6, {0x9, 0x8, 0x525, 0x2}}, @void, @void, @void, @void}, 0x41) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async) 06:36:49 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x43451) 06:36:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getneightbl={0x14, 0x42, 0x229}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e00)=""/4096, 0x2008}, {&(0x7f0000002e00)=""/4100, 0x1004}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x1, 0x92f, 0x14, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x0, 0x80, 0x0, 0x4000003}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r2, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x71, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x71, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_getnetconf={0x3c, 0x52, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x800}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}]}, 0x3c}}, 0xc004) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r7, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@ipv4_newrule={0x24, 0x20, 0x400, 0x70bd2c, 0x25dfdbff, {0x2, 0x80, 0x80, 0x0, 0x4, 0x0, 0x0, 0xf365ae227ddcf7d9, 0x1000c}, [@FRA_SRC={0x8, 0x2, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) 06:36:50 executing program 0: sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0xa}, 0x45) 06:36:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=@newneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 06:36:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x9, 0x0, &(0x7f0000000580)) 06:36:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x34, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21, 0x30a}}]}, 0x34}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 06:36:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)={0x48, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x91}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x41}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}, @NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000140600000008000300243bc70a37aa2ac9cd4c98562b6d7046b714fcc86f567478bbca80ae914dcf6eb8a6b78ba1c33b5c336d214c8396c9de2ad2f0ad36aea34e6b0a1d44d1f6507630ec25128edaa33c87961e9019c672ef57be44961fcbd9fab7195760ceeb017f2023950e48a8182f5e67fa44ffd038", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000006c0)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x3, 0x1, 0xb2}, @val={0x4, 0x6, {0x9, 0x8, 0x525, 0x2}}, @void, @void, @void, @void}, 0x41) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:36:53 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000008740)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x0, 0x228, 0x0, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @local}, [], [0x0, 0x0, 0xff000000], 'ip6_vti0\x00', 'dummy0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'veth1_virt_wifi\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) socket$unix(0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 06:36:53 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000340), &(0x7f0000000040)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000340), &(0x7f0000000040)=@tcp, 0x1}, 0x20) [ 1794.437376][ T1350] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 06:36:53 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@get={0x1, &(0x7f0000000340)=""/105, 0x7}) [ 1796.357635][ T1376] x_tables: duplicate underflow at hook 2 06:36:55 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1_to_team\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1b, 0x9}}) [ 1797.100469][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.107500][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 06:36:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="500000000802110000010802110000000802110000000000006412be755ebac56a5b9937d04700000000000000640001000006020202"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:36:56 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000008740)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x0, 0x228, 0x0, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @local}, [], [0x0, 0x0, 0xff000000], 'ip6_vti0\x00', 'dummy0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'veth1_virt_wifi\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) socket$unix(0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) [ 1798.771465][ T1389] x_tables: duplicate underflow at hook 2 [ 1799.777926][ T1363] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1800.291940][ T1364] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 06:36:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getneightbl={0x14, 0x42, 0x229}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e00)=""/4096, 0x2008}, {&(0x7f0000002e00)=""/4100, 0x1004}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x1, 0x92f, 0x14, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x0, 0x80, 0x0, 0x4000003}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r2, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x71, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x71, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_getnetconf={0x3c, 0x52, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x800}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}]}, 0x3c}}, 0xc004) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r7, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@ipv4_newrule={0x24, 0x20, 0x400, 0x70bd2c, 0x25dfdbff, {0x2, 0x80, 0x80, 0x0, 0x4, 0x0, 0x0, 0xf365ae227ddcf7d9, 0x1000c}, [@FRA_SRC={0x8, 0x2, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) 06:36:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000008740)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x0, 0x228, 0x0, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @local}, [], [0x0, 0x0, 0xff000000], 'ip6_vti0\x00', 'dummy0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'veth1_virt_wifi\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) socket$unix(0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 06:37:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="500000000802110000010802110000000802110000000000006412be755ebac56a5b9937d04700000000000000640001000006020202"], 0x36) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1801.251210][ T1395] x_tables: duplicate underflow at hook 2 06:37:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000008740)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x0, 0x228, 0x0, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @local}, [], [0x0, 0x0, 0xff000000], 'ip6_vti0\x00', 'dummy0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'veth1_virt_wifi\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) socket$unix(0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) [ 1803.465218][ T1416] x_tables: duplicate underflow at hook 2 06:37:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x34, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21, 0x30a}}]}, 0x34}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 06:37:47 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) 06:37:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="500000000802110000010802110000000802110000000000006412be755ebac56a5b9937d04700000000000000640001000006020202"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 06:37:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'pimreg0\x00', 0x400}) 06:37:48 executing program 2: syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:37:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x4d3, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) [ 1851.813519][ T1406] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 06:37:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r3 = socket(0x2, 0x3, 0xc3) bind$netrom(r3, &(0x7f0000000000)={{0xa, @null={0x40, 0x40, 0xe0, 0x40, 0x40, 0x40, 0x74}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null]}, 0x48) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000000002c002c800800000009000000080000000300000008"], 0x70}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00', @ANYBLOB="2eeb42b731ce841cb71fefbff13c913a052a198e0326f3d3256dbf0582d76cfb0f527057a3b215706ac64d547157284f536d946da46a9b6e534f9415fe917f64d61b8e52ae200ca5e17e235a9ed012113ce3336e1408648fafaf", @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900001000002b00000030003300c0000000ffffffffffff080211000001505050505050000000008c100200400700000000429f74512bb9cd54"], 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x11c, r4, 0x10d, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x2, 0xf}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_KEYS={0x28, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac08}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac0d, 0xfac02, 0xfac0b]}, @NL80211_ATTR_SAE_PASSWORD={0x23, 0x115, "b9459ec3c5ddb78b41f2830ff4c7151a3e389e06c4b2f09f7cf80fbf1ede78"}, @NL80211_ATTR_AKM_SUITES={0x14, 0x4c, [0xfac10, 0xfac14, 0xfac06, 0xfac14]}, @NL80211_ATTR_SAE_PASSWORD={0x51, 0x115, "e60c14065c35b741b8787e75edde15d8f11b4fbe874d3dc777a9dd9be895e6ae37c8cf4a39e9bd5486a6ea69809c886c06a8f003de58ac87eb81e1ebc378d82a97fa8aa19dced419e5e53288e2"}, @NL80211_ATTR_CONTROL_PORT={0x4}], @NL80211_ATTR_PBSS={0x4}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4}, 0x4040040) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1858.561393][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.568212][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 1859.771702][ T1385] syz_tun (unregistering): left allmulticast mode [ 1859.869557][ T1385] syz_tun (unregistering): left promiscuous mode [ 1859.971498][ T1385] bridge0: port 3(syz_tun) entered disabled state [ 1862.614963][ T1379] bridge0: port 3(syz_tun) entered disabled state [ 1863.146520][ T1379] syz_tun (unregistering): left allmulticast mode [ 1863.186370][ T1379] syz_tun (unregistering): left promiscuous mode [ 1863.300262][ T1379] bridge0: port 3(syz_tun) entered disabled state 06:38:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getneightbl={0x14, 0x42, 0x229}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e00)=""/4096, 0x2008}, {&(0x7f0000002e00)=""/4100, 0x1004}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x1, 0x92f, 0x14, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x0, 0x80, 0x0, 0x4000003}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r2, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x71, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x71, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_getnetconf={0x3c, 0x52, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x800}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}]}, 0x3c}}, 0xc004) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r7, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@ipv4_newrule={0x24, 0x20, 0x400, 0x70bd2c, 0x25dfdbff, {0x2, 0x80, 0x80, 0x0, 0x4, 0x0, 0x0, 0xf365ae227ddcf7d9, 0x1000c}, [@FRA_SRC={0x8, 0x2, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) 06:38:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r3 = socket(0x2, 0x3, 0xc3) bind$netrom(r3, &(0x7f0000000000)={{0xa, @null={0x40, 0x40, 0xe0, 0x40, 0x40, 0x40, 0x74}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null]}, 0x48) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000000002c002c800800000009000000080000000300000008"], 0x70}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00', @ANYBLOB="2eeb42b731ce841cb71fefbff13c913a052a198e0326f3d3256dbf0582d76cfb0f527057a3b215706ac64d547157284f536d946da46a9b6e534f9415fe917f64d61b8e52ae200ca5e17e235a9ed012113ce3336e1408648fafaf", @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900001000002b00000030003300c0000000ffffffffffff080211000001505050505050000000008c100200400700000000429f74512bb9cd54"], 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x11c, r4, 0x10d, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x2, 0xf}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_KEYS={0x28, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac08}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac0d, 0xfac02, 0xfac0b]}, @NL80211_ATTR_SAE_PASSWORD={0x23, 0x115, "b9459ec3c5ddb78b41f2830ff4c7151a3e389e06c4b2f09f7cf80fbf1ede78"}, @NL80211_ATTR_AKM_SUITES={0x14, 0x4c, [0xfac10, 0xfac14, 0xfac06, 0xfac14]}, @NL80211_ATTR_SAE_PASSWORD={0x51, 0x115, "e60c14065c35b741b8787e75edde15d8f11b4fbe874d3dc777a9dd9be895e6ae37c8cf4a39e9bd5486a6ea69809c886c06a8f003de58ac87eb81e1ebc378d82a97fa8aa19dced419e5e53288e2"}, @NL80211_ATTR_CONTROL_PORT={0x4}], @NL80211_ATTR_PBSS={0x4}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4}, 0x4040040) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) socket(0x2, 0x3, 0xc3) (async) bind$netrom(r3, &(0x7f0000000000)={{0xa, @null={0x40, 0x40, 0xe0, 0x40, 0x40, 0x40, 0x74}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null]}, 0x48) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000000002c002c800800000009000000080000000300000008"], 0x70}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00', @ANYBLOB="2eeb42b731ce841cb71fefbff13c913a052a198e0326f3d3256dbf0582d76cfb0f527057a3b215706ac64d547157284f536d946da46a9b6e534f9415fe917f64d61b8e52ae200ca5e17e235a9ed012113ce3336e1408648fafaf", @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900001000002b00000030003300c0000000ffffffffffff080211000001505050505050000000008c100200400700000000429f74512bb9cd54"], 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x11c, r4, 0x10d, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x2, 0xf}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_KEYS={0x28, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac08}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac0d, 0xfac02, 0xfac0b]}, @NL80211_ATTR_SAE_PASSWORD={0x23, 0x115, "b9459ec3c5ddb78b41f2830ff4c7151a3e389e06c4b2f09f7cf80fbf1ede78"}, @NL80211_ATTR_AKM_SUITES={0x14, 0x4c, [0xfac10, 0xfac14, 0xfac06, 0xfac14]}, @NL80211_ATTR_SAE_PASSWORD={0x51, 0x115, "e60c14065c35b741b8787e75edde15d8f11b4fbe874d3dc777a9dd9be895e6ae37c8cf4a39e9bd5486a6ea69809c886c06a8f003de58ac87eb81e1ebc378d82a97fa8aa19dced419e5e53288e2"}, @NL80211_ATTR_CONTROL_PORT={0x4}], @NL80211_ATTR_PBSS={0x4}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4}, 0x4040040) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async) 06:38:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'pimreg0\x00', 0x400}) [ 1867.497376][ T1406] bridge0: port 3(syz_tun) entered disabled state 06:38:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r3 = socket(0x2, 0x3, 0xc3) bind$netrom(r3, &(0x7f0000000000)={{0xa, @null={0x40, 0x40, 0xe0, 0x40, 0x40, 0x40, 0x74}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null]}, 0x48) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000000002c002c800800000009000000080000000300000008"], 0x70}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00', @ANYBLOB="2eeb42b731ce841cb71fefbff13c913a052a198e0326f3d3256dbf0582d76cfb0f527057a3b215706ac64d547157284f536d946da46a9b6e534f9415fe917f64d61b8e52ae200ca5e17e235a9ed012113ce3336e1408648fafaf", @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900001000002b00000030003300c0000000ffffffffffff080211000001505050505050000000008c100200400700000000429f74512bb9cd54"], 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x11c, r4, 0x10d, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x2, 0xf}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_KEYS={0x28, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac08}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac0d, 0xfac02, 0xfac0b]}, @NL80211_ATTR_SAE_PASSWORD={0x23, 0x115, "b9459ec3c5ddb78b41f2830ff4c7151a3e389e06c4b2f09f7cf80fbf1ede78"}, @NL80211_ATTR_AKM_SUITES={0x14, 0x4c, [0xfac10, 0xfac14, 0xfac06, 0xfac14]}, @NL80211_ATTR_SAE_PASSWORD={0x51, 0x115, "e60c14065c35b741b8787e75edde15d8f11b4fbe874d3dc777a9dd9be895e6ae37c8cf4a39e9bd5486a6ea69809c886c06a8f003de58ac87eb81e1ebc378d82a97fa8aa19dced419e5e53288e2"}, @NL80211_ATTR_CONTROL_PORT={0x4}], @NL80211_ATTR_PBSS={0x4}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4}, 0x4040040) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1870.429525][ T1406] syz_tun (unregistering): left allmulticast mode [ 1870.600216][ T1406] syz_tun (unregistering): left promiscuous mode [ 1870.724850][ T1406] bridge0: port 3(syz_tun) entered disabled state 06:38:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1877.795188][T32696] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1877.806631][T32696] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1877.816389][T32696] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1877.827582][T32696] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1877.841939][T32696] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1877.849516][T32696] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1878.128623][ T5097] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1878.142687][ T5097] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1878.150870][ T5097] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1878.165493][ T5097] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1878.174809][ T5097] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1878.185256][ T5097] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1879.277956][ T1491] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1879.296055][ T1491] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1879.311537][ T1491] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1879.322172][ T1491] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1879.330260][ T1491] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1879.342584][ T1491] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1879.951940][ T5097] Bluetooth: hci1: command 0x0409 tx timeout [ 1880.065376][ T1491] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1880.076208][ T1491] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1880.085562][ T1491] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1880.097384][ T1491] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1880.277246][ T1491] Bluetooth: hci2: command 0x0409 tx timeout [ 1880.318731][ T1491] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1880.355182][ T1491] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1881.473737][ T5097] Bluetooth: hci3: command 0x0409 tx timeout [ 1882.031964][ T5097] Bluetooth: hci1: command 0x041b tx timeout [ 1882.352033][ T5097] Bluetooth: hci2: command 0x041b tx timeout [ 1882.435749][ T5097] Bluetooth: hci5: command 0x0409 tx timeout [ 1883.591939][ T5097] Bluetooth: hci3: command 0x041b tx timeout [ 1884.111803][ T5097] Bluetooth: hci1: command 0x040f tx timeout [ 1884.432003][ T5097] Bluetooth: hci2: command 0x040f tx timeout [ 1884.511869][ T5097] Bluetooth: hci5: command 0x041b tx timeout [ 1885.641785][ T5097] Bluetooth: hci3: command 0x040f tx timeout [ 1886.024860][T31259] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 1886.192596][ T5097] Bluetooth: hci1: command 0x0419 tx timeout [ 1886.522096][ T5097] Bluetooth: hci2: command 0x0419 tx timeout [ 1886.617198][ T5097] Bluetooth: hci5: command 0x040f tx timeout [ 1887.721712][ T5097] Bluetooth: hci3: command 0x0419 tx timeout [ 1888.671805][ T5097] Bluetooth: hci5: command 0x0419 tx timeout [ 1890.047788][T31259] tipc: Left network mode [ 1911.767820][T31259] IPVS: stopping backup sync thread 8718 ... [ 1914.478020][ T1481] chnl_net:caif_netlink_parms(): no params data found [ 1919.991979][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1920.002827][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 1924.640204][ T1481] bridge0: port 1(bridge_slave_0) entered blocking state [ 1924.655831][ T1481] bridge0: port 1(bridge_slave_0) entered disabled state [ 1924.686285][ T1481] bridge_slave_0: entered allmulticast mode [ 1924.747523][ T1481] bridge_slave_0: entered promiscuous mode [ 1929.023129][T31259] hsr_slave_0: left promiscuous mode [ 1929.133314][T31259] hsr_slave_1: left promiscuous mode [ 1929.175065][T31259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1932.535261][T31259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1936.741375][T31259] bridge_slave_1: left allmulticast mode [ 1936.872399][T31259] bridge_slave_1: left promiscuous mode [ 1937.126490][T31259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1937.999645][T31259] bridge_slave_0: left promiscuous mode [ 1938.114130][T31259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1948.760162][ T1491] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1948.790240][ T1491] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1948.909194][ T1491] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1948.958536][ T1491] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1949.076274][ T1491] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1949.086024][ T1491] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1951.055038][ T5097] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1951.065828][ T5097] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1951.076014][ T5097] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1951.165720][ T5097] Bluetooth: hci6: command 0x0409 tx timeout [ 1951.178074][ T5097] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1951.187502][ T5097] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1951.196626][ T5097] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1952.693951][ T1553] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1952.704594][ T1553] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1952.715044][ T1553] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1952.725517][ T1553] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1952.813584][ T1553] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1952.821994][ T1553] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1952.970880][ T1553] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1953.104708][ T1553] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1953.114850][ T1553] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1953.124397][ T1553] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1953.133117][ T1553] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1953.140644][ T1553] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1953.233154][ T5097] Bluetooth: hci6: command 0x041b tx timeout [ 1953.392004][ T5097] Bluetooth: hci7: command 0x0409 tx timeout [ 1954.912515][ T5097] Bluetooth: hci8: command 0x0409 tx timeout [ 1955.311969][ T5097] Bluetooth: hci9: command 0x0409 tx timeout [ 1955.318928][ T5097] Bluetooth: hci6: command 0x040f tx timeout [ 1955.471821][ T5097] Bluetooth: hci7: command 0x041b tx timeout [ 1956.992151][ T5097] Bluetooth: hci8: command 0x041b tx timeout [ 1957.401857][ T5097] Bluetooth: hci6: command 0x0419 tx timeout [ 1957.407962][ T5097] Bluetooth: hci9: command 0x041b tx timeout [ 1957.561980][ T1553] Bluetooth: hci7: command 0x040f tx timeout [ 1959.072447][ T1553] Bluetooth: hci8: command 0x040f tx timeout [ 1959.471794][ T1553] Bluetooth: hci9: command 0x040f tx timeout [ 1959.773267][ T1553] Bluetooth: hci7: command 0x0419 tx timeout [ 1961.183295][ T1553] Bluetooth: hci8: command 0x0419 tx timeout [ 1961.551621][ T1553] Bluetooth: hci9: command 0x0419 tx timeout [ 1981.454388][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.461536][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 2003.951325][ T1559] Bluetooth: hci2: command 0x0406 tx timeout [ 2003.968859][ T1559] Bluetooth: hci3: command 0x0406 tx timeout [ 2003.976213][ T1559] Bluetooth: hci5: command 0x0406 tx timeout [ 2003.982848][ T1559] Bluetooth: hci1: command 0x0406 tx timeout [ 2032.661960][ T1491] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2032.679077][ T1491] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2032.692196][ T1491] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2033.224186][ T1491] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2033.439146][ T1491] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 2033.474700][ T1491] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2035.584630][ T1553] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2035.596696][ T1553] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2035.606890][ T1553] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2035.618135][ T1553] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2035.627453][ T1553] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 2035.635673][ T1553] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2035.645132][ T5097] Bluetooth: hci10: command 0x0409 tx timeout [ 2036.574339][ T1491] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 2036.634706][ T1491] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 2036.648650][ T1491] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 2036.684009][ T1491] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 2036.693322][ T1491] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 2036.700988][ T1491] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 2037.696927][ T1553] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2037.851420][ T5097] Bluetooth: hci10: command 0x041b tx timeout [ 2037.854833][T32696] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 2037.857759][ T1553] Bluetooth: hci11: command 0x0409 tx timeout [ 2037.883807][T32696] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 2038.360276][T32696] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 2038.370214][T32696] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 2038.379411][T32696] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 2038.554785][T31259] pim6reg (unregistering): left allmulticast mode [ 2038.831657][ T1491] Bluetooth: hci12: command 0x0409 tx timeout [ 2039.871497][ T1491] Bluetooth: hci10: command 0x040f tx timeout [ 2039.951519][ T1491] Bluetooth: hci11: command 0x041b tx timeout [ 2040.512578][ T1491] Bluetooth: hci13: command 0x0409 tx timeout [ 2040.930631][ T1491] Bluetooth: hci12: command 0x041b tx timeout [ 2041.970939][ T1491] Bluetooth: hci10: command 0x0419 tx timeout [ 2042.041976][ T1491] Bluetooth: hci11: command 0x040f tx timeout [ 2042.620787][ T1491] Bluetooth: hci13: command 0x041b tx timeout [ 2042.861299][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.870650][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 2043.002928][ T1491] Bluetooth: hci12: command 0x040f tx timeout [ 2044.121930][ T1491] Bluetooth: hci11: command 0x0419 tx timeout [ 2044.681944][ T1491] Bluetooth: hci13: command 0x040f tx timeout [ 2045.073149][ T1491] Bluetooth: hci12: command 0x0419 tx timeout [ 2046.804939][ T1491] Bluetooth: hci13: command 0x0419 tx timeout [ 2063.269126][T31259] team0 (unregistering): Port device team_slave_1 removed [ 2069.421991][T31259] team0 (unregistering): Port device team_slave_0 removed [ 2071.767292][T31259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2075.292444][T31259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2075.641474][ T1558] Bluetooth: hci8: command 0x0406 tx timeout [ 2075.647556][ T1558] Bluetooth: hci6: command 0x0406 tx timeout [ 2075.656080][ T1561] Bluetooth: hci7: command 0x0406 tx timeout [ 2075.663360][ T1561] Bluetooth: hci9: command 0x0406 tx timeout [ 2081.241856][ T29] INFO: task dhcpcd:4738 blocked for more than 143 seconds. [ 2081.251347][ T29] Not tainted 6.7.0-rc8-syzkaller-00126-gac631873c9e7 #0 [ 2081.259195][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2081.993079][ T29] task:dhcpcd state:D stack:23040 pid:4738 tgid:4738 ppid:4737 flags:0x00000002 [ 2082.021336][ T29] Call Trace: [ 2082.024691][ T29] [ 2082.027676][ T29] __schedule+0xedb/0x5af0 [ 2082.142282][ T29] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 2082.148401][ T29] ? io_schedule_timeout+0x150/0x150 [ 2082.171277][ T29] ? schedule+0x1fc/0x270 [ 2082.175706][ T29] ? reacquire_held_locks+0x4c0/0x4c0 [ 2082.195045][ T29] ? __mutex_lock+0x5b4/0x9d0 [ 2082.199817][ T29] ? __mutex_trylock_common+0x78/0x250 [ 2082.221311][ T29] schedule+0xe9/0x270 [ 2082.225494][ T29] schedule_preempt_disabled+0x13/0x20 [ 2082.231046][ T29] __mutex_lock+0x5b9/0x9d0 [ 2082.357643][ T29] ? netlink_dump+0xc1/0xca0 [ 2082.381259][ T29] ? mutex_trylock+0x130/0x130 [ 2082.386132][ T29] ? netlink_dump+0xc1/0xca0 [ 2082.390771][ T29] netlink_dump+0xc1/0xca0 [ 2082.492669][ T29] ? netlink_deliver_tap+0xd00/0xd00 [ 2082.498107][ T29] ? kfree_skbmem+0xef/0x1b0 [ 2082.521367][ T29] netlink_recvmsg+0x9ff/0xf20 [ 2082.526240][ T29] ? netlink_dump+0xca0/0xca0 [ 2082.530975][ T29] ? aa_af_perm+0x250/0x250 [ 2082.546397][ T29] ? find_held_lock+0x2d/0x110 [ 2082.571173][ T29] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 2082.576557][ T29] ? security_socket_recvmsg+0x92/0xc0 [ 2082.661242][ T29] ? netlink_dump+0xca0/0xca0 [ 2082.666021][ T29] sock_recvmsg+0xe2/0x170 [ 2082.670511][ T29] ____sys_recvmsg+0x21f/0x5c0 [ 2082.701290][ T29] ? kernel_recvmsg+0x80/0x80 [ 2082.706099][ T29] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 2082.721321][ T29] ___sys_recvmsg+0x115/0x1a0 [ 2082.726107][ T29] ? copy_msghdr_from_user+0x160/0x160 [ 2082.814578][ T29] ? find_held_lock+0x2d/0x110 [ 2082.819479][ T29] ? __fget_light+0x1fc/0x260 [ 2082.841240][ T29] __sys_recvmsg+0x114/0x1e0 [ 2082.845952][ T29] ? __sys_recvmsg_sock+0x50/0x50 [ 2082.851063][ T29] ? __do_sys_rseq+0x750/0x750 [ 2082.866717][ T29] ? syscall_enter_from_user_mode+0x7f/0x120 [ 2082.891386][ T29] do_syscall_64+0x40/0x110 [ 2082.895989][ T29] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2083.011453][ T29] RIP: 0033:0x7f62f72d291e [ 2083.015954][ T29] RSP: 002b:00007ffd40dfedb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2083.048260][ T29] RAX: ffffffffffffffda RBX: 00007ffd40dffee0 RCX: 00007f62f72d291e [ 2083.152876][ T29] RDX: 0000000000000000 RSI: 00007ffd40dffe00 RDI: 000000000000000f [ 2083.160950][ T29] RBP: 00007ffd40dffe70 R08: 0000000000000000 R09: 0000000000000000 [ 2083.191273][ T29] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000ef4 [ 2083.199316][ T29] R13: 00007ffd40dffde4 R14: 00007ffd40dffe00 R15: 00007ffd40dffdf0 [ 2083.292750][ T29] [ 2083.323214][ T29] INFO: task kworker/1:12:11479 blocked for more than 145 seconds. [ 2083.591770][ T29] Not tainted 6.7.0-rc8-syzkaller-00126-gac631873c9e7 #0 [ 2083.599418][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2084.131461][ T29] task:kworker/1:12 state:D stack:27744 pid:11479 tgid:11479 ppid:2 flags:0x00004000 [ 2084.313713][ T29] Workqueue: events switchdev_deferred_process_work [ 2084.401430][ T29] Call Trace: [ 2084.404816][ T29] [ 2084.407794][ T29] __schedule+0xedb/0x5af0 [ 2084.539371][ T29] ? print_usage_bug.part.0+0x550/0x550 [ 2084.551320][ T29] ? io_schedule_timeout+0x150/0x150 [ 2084.556704][ T29] ? schedule+0x1fc/0x270 [ 2084.581437][ T29] ? reacquire_held_locks+0x4c0/0x4c0 [ 2084.586936][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 2084.675789][ T29] ? lockdep_hardirqs_on+0x7d/0x110 [ 2084.681091][ T29] schedule+0xe9/0x270 [ 2084.686108][ T29] schedule_preempt_disabled+0x13/0x20 [ 2084.701676][ T29] __mutex_lock+0x5b9/0x9d0 [ 2084.706266][ T29] ? switchdev_deferred_process_work+0xe/0x20 [ 2084.731322][ T29] ? mutex_trylock+0x130/0x130 [ 2084.736175][ T29] ? lock_sync+0x190/0x190 [ 2084.740674][ T29] ? lock_sync+0x190/0x190 [ 2084.761214][ T29] ? switchdev_deferred_process_work+0xe/0x20 [ 2084.767374][ T29] switchdev_deferred_process_work+0xe/0x20 [ 2084.781340][ T29] process_one_work+0x886/0x15d0 [ 2084.786422][ T29] ? lock_sync+0x190/0x190 [ 2084.790907][ T29] ? workqueue_congested+0x300/0x300 [ 2084.821395][ T29] ? assign_work+0x1a0/0x250 [ 2084.826089][ T29] worker_thread+0x8b9/0x1290 [ 2084.830851][ T29] ? process_one_work+0x15d0/0x15d0 [ 2084.851377][ T29] kthread+0x2c6/0x3a0 [ 2084.855548][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 2084.860821][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 2084.882090][ T29] ret_from_fork+0x45/0x80 [ 2084.886599][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 2084.911433][ T29] ret_from_fork_asm+0x11/0x20 [ 2084.916384][ T29] [ 2084.951194][ T29] INFO: task kworker/1:17:11484 blocked for more than 147 seconds. [ 2084.959161][ T29] Not tainted 6.7.0-rc8-syzkaller-00126-gac631873c9e7 #0 [ 2085.445210][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2085.732767][ T29] task:kworker/1:17 state:D stack:23808 pid:11484 tgid:11484 ppid:2 flags:0x00004000 [ 2085.753755][ T29] Workqueue: events linkwatch_event [ 2085.759157][ T29] Call Trace: [ 2086.051186][ T29] [ 2086.054214][ T29] __schedule+0xedb/0x5af0 [ 2086.058707][ T29] ? print_usage_bug.part.0+0x550/0x550 [ 2086.091457][ T29] ? io_schedule_timeout+0x150/0x150 [ 2086.096857][ T29] ? schedule+0x1fc/0x270 [ 2086.191322][ T29] ? reacquire_held_locks+0x4c0/0x4c0 [ 2086.196827][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 2086.221272][ T29] ? lockdep_hardirqs_on+0x7d/0x110 [ 2086.226583][ T29] schedule+0xe9/0x270 [ 2086.230907][ T29] schedule_preempt_disabled+0x13/0x20 [ 2086.281217][ T29] __mutex_lock+0x5b9/0x9d0 [ 2086.285828][ T29] ? linkwatch_event+0x51/0xc0 [ 2086.290669][ T29] ? mutex_trylock+0x130/0x130 [ 2086.351365][ T29] ? lock_sync+0x190/0x190 [ 2086.355901][ T29] ? lock_sync+0x190/0x190 [ 2086.360389][ T29] ? reacquire_held_locks+0x4c0/0x4c0 [ 2086.517127][ T29] ? linkwatch_event+0x51/0xc0 [ 2086.581154][ T29] linkwatch_event+0x51/0xc0 [ 2086.585860][ T29] ? __linkwatch_run_queue+0x680/0x680 [ 2086.694993][ T29] ? rcu_is_watching+0x12/0xb0 [ 2086.699878][ T29] process_one_work+0x886/0x15d0 [ 2086.741274][ T29] ? lock_sync+0x190/0x190 [ 2086.745808][ T29] ? workqueue_congested+0x300/0x300 [ 2086.761280][ T29] ? assign_work+0x1a0/0x250 [ 2086.765966][ T29] worker_thread+0x8b9/0x1290 [ 2086.770731][ T29] ? process_one_work+0x15d0/0x15d0 [ 2086.801171][ T29] kthread+0x2c6/0x3a0 [ 2086.805342][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 2086.810602][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 2086.931225][ T29] ret_from_fork+0x45/0x80 [ 2086.935759][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 2086.993219][ T29] ret_from_fork_asm+0x11/0x20 [ 2086.998114][ T29] [ 2087.011327][ T29] INFO: task kworker/0:10:1428 blocked for more than 149 seconds. [ 2087.019285][ T29] Not tainted 6.7.0-rc8-syzkaller-00126-gac631873c9e7 #0 [ 2087.352905][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2087.432755][ T29] task:kworker/0:10 state:D stack:28224 pid:1428 tgid:1428 ppid:2 flags:0x00004000 [ 2087.453871][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 2087.981830][ T29] Call Trace: [ 2088.071567][ T29] [ 2088.076229][ T29] __schedule+0xedb/0x5af0 [ 2088.144720][ T29] ? print_usage_bug.part.0+0x550/0x550 [ 2088.181364][ T29] ? io_schedule_timeout+0x150/0x150 [ 2088.189746][ T29] ? schedule+0x1fc/0x270 [ 2088.261368][ T29] ? reacquire_held_locks+0x4c0/0x4c0 [ 2088.300146][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 2088.341565][ T29] ? lockdep_hardirqs_on+0x7d/0x110 [ 2088.364916][ T29] schedule+0xe9/0x270 [ 2088.411600][ T29] schedule_preempt_disabled+0x13/0x20 [ 2088.417197][ T29] __mutex_lock+0x5b9/0x9d0 [ 2088.551207][ T29] ? addrconf_dad_work+0xcf/0x14b0 [ 2088.556439][ T29] ? mutex_trylock+0x130/0x130 [ 2088.671245][ T29] ? find_held_lock+0x2d/0x110 [ 2088.676148][ T29] ? addrconf_dad_work+0xcf/0x14b0 [ 2088.828340][ T29] ? rtnl_lock+0x9/0x20 [ 2088.881157][ T29] addrconf_dad_work+0xcf/0x14b0 [ 2088.924384][ T29] ? lock_sync+0x190/0x190 [ 2088.992004][ T29] ? addrconf_dad_completed+0x1030/0x1030 [ 2088.997870][ T29] process_one_work+0x886/0x15d0 [ 2089.081171][ T29] ? lock_sync+0x190/0x190 [ 2089.085715][ T29] ? workqueue_congested+0x300/0x300 [ 2089.231667][ T29] ? assign_work+0x1a0/0x250 [ 2089.236390][ T29] worker_thread+0x8b9/0x1290 [ 2089.381469][ T29] ? __kthread_parkme+0x14b/0x220 [ 2089.386608][ T29] ? process_one_work+0x15d0/0x15d0 [ 2089.496640][ T29] kthread+0x2c6/0x3a0 [ 2089.500821][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 2089.611876][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 2089.617621][ T29] ret_from_fork+0x45/0x80 [ 2089.631273][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 2089.647863][ T29] ret_from_fork_asm+0x11/0x20 [ 2089.681504][ T29] [ 2089.731938][ T29] INFO: task syz-executor.0:1481 blocked for more than 151 seconds. [ 2090.204728][ T29] Not tainted 6.7.0-rc8-syzkaller-00126-gac631873c9e7 #0 [ 2090.279324][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2090.374940][ T29] task:syz-executor.0 state:D stack:24720 pid:1481 tgid:1481 ppid:1 flags:0x00004006 [ 2090.395960][ T29] Call Trace: [ 2090.399299][ T29] [ 2090.411186][ T29] __schedule+0xedb/0x5af0 [ 2090.415695][ T29] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 2090.471380][ T29] ? io_schedule_timeout+0x150/0x150 [ 2090.476786][ T29] ? schedule+0x1fc/0x270 [ 2090.864957][ T29] ? reacquire_held_locks+0x4c0/0x4c0 [ 2090.870440][ T29] ? __mutex_lock+0x5b4/0x9d0 [ 2090.901422][ T29] ? __mutex_trylock_common+0x78/0x250 [ 2090.906976][ T29] ? spin_bug+0x1d0/0x1d0 [ 2090.981873][ T29] schedule+0xe9/0x270 [ 2090.986049][ T29] schedule_preempt_disabled+0x13/0x20 [ 2091.006226][ T29] __mutex_lock+0x5b9/0x9d0 [ 2091.010829][ T29] ? rtnetlink_rcv_msg+0x372/0xe00 [ 2091.031439][ T29] ? mutex_trylock+0x130/0x130 [ 2091.036276][ T29] ? rtnetlink_rcv_msg+0x35f/0xe00 [ 2091.051931][ T29] ? rtnetlink_rcv_msg+0x372/0xe00 [ 2091.057140][ T29] rtnetlink_rcv_msg+0x372/0xe00 [ 2091.151326][ T29] ? rtnl_fill_vf+0x4a0/0x4a0 [ 2091.156111][ T29] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 2091.191239][ T29] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 2091.283063][ T29] netlink_rcv_skb+0x16b/0x440